Privacy Policy

Welcome to Featurevote.

Devinova Group AB, Sweden (“we”, “us”, or “our”), operates featurevote at https://featurevote.app (hereinafter referred to as the “Service”).

This Privacy Policy governs your visit to https://featurevote.app and explains how we collect, safeguard, and use information that results from your use of our Service.

By using the Service, you agree to the collection and use of information in accordance with this policy. Terms not otherwise defined in this Privacy Policy have the meanings given to them in our Terms and Conditions.

• Service: The website https://featurevote.app operated by Featurevote.
• Personal Data: Information that identifies an individual, either directly or indirectly.
• Usage Data: Automatically collected data generated through use of the Service or from the Service infrastructure.
• Cookies: Small files stored on your device to help operate or improve our Service.
• Data Controller: The entity that determines the purposes and means of processing Personal Data (Devinova Group AB in this case).
• Data Processor (or Service Provider): Third parties that process data on behalf of Featurevote.
• Data Subject: A living individual who is the subject of Personal Data.
• User: The person using our Service, also the Data Subject.

We collect different types of information to provide and improve our Service.

Personal Data

When using our Service, we may ask for personal information, such as:

• Email address
• First and last name
• Cookies and Usage Data

We may use this information to send newsletters, updates, or promotional materials. You can unsubscribe at any time.

Instagram connections and comment voting

When a workspace administrator connects an Instagram professional account, featurevote receives its Instagram account ID, username and access token. We use the connection to display the linked account, retrieve its media, and publish a numbered voting post only when the administrator chooses to do so. Access tokens are encrypted in our application storage and used by our server to communicate with Instagram.

On a voting post linked by the administrator, we process comment identifiers, text and timestamps, and the commenter identifiers and usernames provided by Instagram. A valid numbered comment is matched to the administrator’s saved request list and counted as a vote. Instagram identities are scoped to the workspace; we do not merge them with website accounts solely because names appear to match.

The commenter’s first counted vote on the board receives one private confirmation from the connected professional account. The reply contains the request title and public board link and is sent within seven days of the comment. This feature does not require an Instagram password or email address and does not subscribe the commenter to marketing or changelog emails.

Usage Data

We may collect data such as:

• IP address
• Browser type/version
• Pages visited and time spent
• Device type, OS, and diagnostic info

Tracking Cookies and Technologies

We use cookies and similar tracking tools to monitor activity and improve the Service.

Examples of cookies:

• Session Cookies: For operation of the Service
• Preference Cookies: To remember user settings
• Security Cookies: For security purposes
• Advertising Cookies: To deliver relevant ads

You can disable cookies in your browser, but some features may not function properly.

Featurevote uses collected data for:

• Operating and maintaining the Service
• Notifying you about changes
• Enabling interactive features
• Providing support
• Analyzing usage and improving the Service
• Monitoring for technical issues
• Sending account or subscription notifications
• Sending offers or news, unless opted out
• Fulfilling legal or contractual obligations
• Any other purpose with your consent

We retain Personal Data only as long as necessary for the purposes outlined above. Usage Data may be kept for internal analysis, security, or legal compliance.

We retain Instagram connection and voting information to operate the integration and prevent duplicate votes or replies. Disconnecting Instagram removes the connection and stored numbered-post mappings. Counted votes, commenter identities and comment-processing records remain so reconnecting does not count or reply to the same participant again. Disconnecting is separate from a personal-data deletion request.

To request access, correction or deletion of Instagram-related personal data, contact support@featurevote.app with the Instagram username and business board involved. We may ask for information needed to verify control of the account. Do not send an Instagram password or access token.

We use the following providers to operate the Service. For each we list what data it handles and where that processing takes place.

• Supabase: database, authentication, and file storage. Holds your account details, board content, feature requests, comments, votes, and uploaded files. Hosted in the European Union.
• Vercel: application hosting. Server-rendered pages and API requests are executed in Vercel’s Stockholm (EU) region. Vercel’s global content delivery network serves cached and static content from locations worldwide, which may be outside the EU.
• Resend: email delivery. Handles recipient email addresses and the content of the messages we send, such as notifications and changelog updates. Hosted in Ireland (EU).
• Sentry: error and performance monitoring. Receives diagnostic data when something goes wrong, including page addresses, browser and device information, and error details. Processed in Sentry’s European Union region.
• OpenAI: AI-assisted features. When you submit a request to a public board, its title and description are automatically sent to OpenAI to suggest possible duplicates; this happens as part of the submission and is not a separate choice you make. Other content is sent only when someone uses the feature concerned: a request, description or comment you ask to have translated or improved, changelog content, screenshots attached to feedback, and the public page text of a website address entered into our demo. Email sent to Featurevote’s own support address is also sent to OpenAI when it arrives, to sort it from automated mail. Processed in the United States.
• Soniox: speech to text. When you choose to speak a request into a board instead of typing it, your voice is streamed from your browser to Soniox and the words come back into the text box. Nothing is sent unless you start the microphone, and we do not keep the recording. Processed in the United States.
• Stripe: payment processing for paid plans. Handles billing and subscription data. We do not store your card details. Processed in the United States and Ireland.
• Google Analytics: website analytics. Receives Usage Data such as pages visited, approximate location, and device information. Processed in the United States.
• PostHog: product analytics on our marketing, sign-in, registration and workspace pages. Receives selected actions, such as registration, board creation, sharing and checkout, together with a pseudonymous user ID and browser information. Workspace slugs, request IDs, private URL parameters, names and email addresses are excluded. Session recordings and automatic click capture are disabled. This integration does not run on customer feedback boards. Stored in PostHog Cloud EU (Frankfurt). A refusal through our analytics cookie choice stops this integration.
• Reddit: optional advertising measurement when enabled, only after separate permission. Receives page and referral information, browser and device data, and visit, registration and board-creation events on selected marketing, sign-in, registration and creator setup pages. We do not supply email addresses, phone numbers or account IDs for matching. The Pixel is excluded from customer feedback boards. Reddit may link events to your Reddit activity for advertising measurement and audiences under its own privacy policy. Processed in the United States, with possible onward transfers described in Reddit’s Privacy Policy.
• Microsoft Clarity: website analytics limited to public marketing pages. Recording does not continue into sign-in, your workspace or customer feedback boards. Records how visitors use a page, such as clicks, scrolling and mouse movement, along with pages visited, approximate location, and device information. Sensitive content is masked by default. Microsoft acts as an independent controller and may use collected data for its own purposes, including product improvement and advertising, under its Privacy Statement. Clarity is provided through Microsoft’s Ireland and United States entities, with international processing described in that statement.

The selected hosting region does not cover every processing location. Supabase’s core database, authentication, storage and backups for featurevote are hosted in Sweden, while its support and operational processing may involve Singapore, the United States and globally distributed support access. Vercel runs our server functions in Stockholm, with content delivery, operations and provider access in other countries, including the United States. Sentry’s EU service data is stored in Frankfurt, Germany; support and operational access may also occur outside that region. Instagram identifiers may appear in operational logs or diagnostic error details handled by these providers.

Where data is transferred outside the European Economic Area, we rely on an adequacy decision or on Standard Contractual Clauses approved by the European Commission, together with appropriate safeguards, to protect that data. By using the Service, you consent to such transfers.

We may disclose Personal Data:

• If required by law or government authorities
• In the event of a merger, acquisition, or asset sale
• To trusted affiliates or contractors helping us run the Service

We take data security seriously but cannot guarantee 100% security. We implement industry-standard measures to protect your information.

You may request to:

• Access, update, or delete your data
• Restrict or object to processing
• Withdraw consent
• Export your data (data portability)

Please contact us to make such requests. We may need to verify your identity.

If you’re in the EU or EEA, you have specific rights under the General Data Protection Regulation (GDPR), including:

• Right to access, correct, or delete your data
• Right to restrict or object to processing
• Right to data portability
• Right to withdraw consent
• Right to file a complaint with a Data Protection Authority

Contact us to exercise these rights.

We use third-party providers for:

• Hosting and infrastructure (Vercel)
• Database, authentication, and file storage (Supabase)
• Email delivery (Resend)
• Error and performance monitoring (Sentry)
• AI-assisted features (OpenAI)
• Speech to text (Soniox)
• Analytics (Google Analytics, Microsoft Clarity, PostHog)
• Optional advertising measurement (Reddit)
• Payment processing (Stripe)

Section 7 sets out what data each provider handles and where it is processed. Our service providers process data to perform services for Featurevote. Microsoft also processes Clarity data as an independent controller for the purposes described in Section 7. If you separately permit Reddit advertising measurement, Reddit also processes those events under its own privacy policy.

We may use:

Google Analytics – to understand how users interact with our Service.

More info: Google Privacy Policy

Microsoft Clarity – to see how visitors use our public website, through session recordings and heatmaps.

More info: Microsoft Privacy Statement

Reddit Pixel – optional measurement of advertising visits and conversions. It stays off until you separately agree. You can withdraw your permission on our Cookie Policy page; withdrawal stops new events but does not erase data Reddit has already received.

More info: Reddit Privacy Policy

The cookies these services set, and the choice you have over them, are described in our Cookie Policy.

We also count visits to each feature board ourselves. To tell visitors apart we combine your IP address and browser details into a code that changes every day, and we keep only that code, never the address itself.

When our widget loads on your website, we note that website’s address so your Install and share page can show where it’s live.

We may use GitHub or similar platforms for development and version control.

GitHub privacy policy: GitHub Privacy Statement

If we offer paid features, we use third-party processors like Stripe.

We do not store your card details.

Stripe’s privacy policy: https://stripe.com/privacy

We may link to external sites. We are not responsible for their privacy policies. Please review them separately.

Our Service is not intended for children under 13. We do not knowingly collect data from minors. If we learn that we have, we will delete the information.

We may update this Privacy Policy from time to time. Changes are effective upon posting. We recommend reviewing this page periodically.

We may notify you via email or within the Service if changes are significant.

If you have questions or requests related to this Privacy Policy, please contact us at:

support@featurevote.app

https://featurevote.app

© 2026 Devinova Group AB · Gothenburg, Sweden