A human perspective deserves care.
Who is responsible
Make Opinion GmbH, Elfenallee 5, 13127 Berlin, Germany, operates HumansReply. Contact hello@humansreply.com for privacy requests. This notice covers the HumansReply website, customer workspace, API and hosted participant experiences. External tests also have the test owner's privacy notice.
Customer accounts and services
We process your name, email address, password hash, workspace details, test specifications, uploaded assets, support requests, payment references and credit transactions to create your account and provide the services you request. The legal basis is performance of a contract or steps before a contract (Article 6(1)(b) GDPR). Billing records are also processed to meet legal obligations (Article 6(1)(c)).
Participants and profiling
Participant suppliers provide a pseudonymous participant identifier, a unique participation identifier, country and available profile attributes, such as age, gender, language, device and qualification answers. We use these to establish eligibility, prevent duplicate participation and route the participant to the requested test. Unknown profile answers remain unknown. A supplier may ask missing qualification questions before entry.
Before a hosted session starts, we ask you to agree to participate. Managed tests collect the answers you submit and test-specific interaction events, such as completion steps, pointer coordinates, clicks and timing. This processing is based on your consent (Article 6(1)(a)). You can leave a test or withdraw your consent at any time without affecting earlier lawful processing. Ask your participant supplier or contact us to connect a rights request to your pseudonymous record.
The test owner receives the responses, session identifiers, relevant eligibility information and test events. Your supplier account identifier is not included in normal customer response exports. The supplier receives your completion status to manage any incentive under its own terms. In fully external storage modes, answer content stays with the test owner; HumansReply stores participation and completion metadata.
Security and operation
We process limited technical logs, request timing and security events to operate the service, investigate abuse and prevent duplicate or invalid completions. This serves our legitimate interests in a secure and reliable platform (Article 6(1)(f)). Automated quality signals are review aids; a negative opinion is not a reason to reject feedback.
Service providers and international transfers
The platform server is hosted in Germany. Private file storage uses Wasabi's Frankfurt region. Transactional email uses Twilio SendGrid; payment and tax calculation use Stripe. These providers receive the data required for their functions, such as an email recipient or billing details. Card data is entered directly at Stripe; HumansReply does not store full card numbers. Providers or participant suppliers may process data outside the EEA; applicable transfer safeguards, such as standard contractual clauses and eligible adequacy arrangements, are used where required.
Cookies
We use essential session and security cookies for login and request protection. The application does not install advertising pixels or analytics trackers by default. External test websites may use additional cookies; the test owner is responsible for explaining them and obtaining any required consent.
Retention and deletion
Account information, test specifications and results are retained while needed to provide your workspace and the requested services. You may request deletion or export through our contact address. We retain records required for tax, accounting, dispute resolution and fraud prevention for the applicable statutory or justified period. Backups are access-restricted and expire under the backup retention schedule. We do not claim that exported copies held by a test owner or supplier are erased by deleting an account here.
Your rights
Subject to the GDPR, you may request access, correction, erasure, restriction and portability of your data, object to processing based on legitimate interests, and withdraw consent. You may lodge a complaint with a supervisory authority, including the Berlin Commissioner for Data Protection and Freedom of Information. We may need proportionate verification to protect your data before fulfilling a request.
Keep private information out of tests
Tests are intended for adults and short browser-based feedback. Test owners must not request passwords, payment credentials or unnecessary sensitive information. Do not submit medical, financial or other private information unless the specific test lawfully requires it and provides suitable disclosures and safeguards.