Privacy Policy
Data Retention, Privacy, and Security — Web and Mobile Application
Last updated: August 20, 2026
Overview
This Privacy Policy includes important information about your personal data and we encourage you to read it carefully. Learn about how long we retain your surveys, data, data privacy and data security. This Policy applies whether you access Brushfire through our web application or our mobile application.
Data Retention & Data Ownership
While you have a Brushfire Research account, we retain and own all data associated with your account. This includes survey data and personal account information.
For accounts, if you are an account administrator, we generally do not delete the data in your account. As long as your account is active, you are responsible for and control the periods for which you retain this data. We also encourage account administrators to actively review their data retention practices in their account and take care to retain data only as long as is strictly necessary.
If you are an User/Administrator we may also collect the information described in the following sections.
Account Registration Information
You need a Brushfire Research account before you can use our services, whether you register through our web application or our mobile application. When you register for an account, we collect your first and last name, email address, password, and phone number. Your phone number and email will be used for account verification purposes and account communication, and, where you provide your consent, for SMS text messaging as described in the "Mobile Application & SMS Communications" section below.
Mobile Application & SMS Communications
Brushfire offers a mobile application for Signal Providers (survey respondents) in addition to our web application.
If you are a new user, you may create your account directly through the mobile application. If you are an existing web user accessing the mobile application for the first time, you may be presented with this Privacy Policy and our Terms and Conditions and asked to agree to them before continuing.
SMS communications are optional and are subject to separate user consent as described below.
SMS Text Message Consent
During account creation, users may choose to provide optional consent to receive transactional SMS messages from Brushfire, operated by Bridge Business Support Solutions LLC, at the mobile phone number they provide.
SMS consent is separate from account registration and email verification. You are not required to provide SMS consent to create or use your Brushfire account.
If you provide SMS consent, Brushfire may send transactional or service-related SMS messages, including:
- Mobile verification codes (OTP) when you choose to verify your mobile phone number after account creation
- Account and security notifications related to your Brushfire account
- Survey-related notifications and reminders for surveys or activities you register for, start, or request
- Survey reward and redemption notifications, including reward confirmations or status updates
Mobile Verification
Mobile phone verification is not required during the account registration process. Account registration is completed using email verification.
After your account has been created, if you have provided SMS consent, Brushfire may provide an option in the Action Required section of the application to verify your mobile phone number using an SMS verification code.
An SMS verification code will only be sent when you have provided the required SMS consent and initiate the mobile verification process.
If you do not provide SMS consent, you can continue to use your Brushfire account without SMS-based mobile verification, and Brushfire will not send you an SMS verification code for this purpose.
Once your mobile phone number has been successfully verified, your verification status may be displayed within your Brushfire account, including applicable areas of the Home screen and Settings.
SMS Message Frequency and Charges
Message frequency varies depending on your account activity and the services or activities you use. Message and data rates may apply.
Reply STOP to any Brushfire SMS message to opt out of receiving further SMS messages. Reply HELP for assistance.
SMS consent is optional and is not required to create or use your Brushfire account.
You may withdraw your SMS consent at any time by replying STOP to a Brushfire SMS message. Once you opt out, Brushfire will stop sending SMS messages covered by your consent.
SMS Information Sharing
We do not sell, rent, or share your mobile phone number, SMS consent information, or SMS opt-in data with third parties or affiliates for their own marketing or promotional purposes.
Billing Information
If you make a payment to Brushfire Research, we require you to provide your billing details, including first and last name, address, email address and financial information corresponding to your selected method of payment (e.g. a credit card number and expiration date).
Account Settings
You can set various preferences and personal details on your account settings page. These may include, for example, your preferred time zone (automatically set to Eastern Standard Time - EST) and communication preferences (e.g. opting in or out of receiving marketing communications, including SMS messages as described above).
In some instances, we may need to delete your data: we may delete your account and survey data in accordance with our data retention policy. We may also delete each survey response over your account's response limits 60 days after it's received. We may retain the data associated with your account potentially longer as required by applicable law. The following sections describe who can delete data, how long it's retained, and whether it can be restored.
Deleting Survey Data
You can request to have your personal data from your admin, personal or client's account deleted by emailing info@brushfireresearch.com. Once deleted from your account, the survey or/and data won't be accessible and you may not be able to restore it. The deleted data is permanently removed from our system within 60 days.
Deleting Your Account
You can request to delete your account or survey data associated with your account at any time by emailing info@brushfireresearch.com. After deletion, the account is disabled immediately. The deleted account and data will be permanently removed from our system within 60 days.
Deleting Client Accounts
The account administrator of a client or user can request to delete an account from their profile at any time by emailing info@brushfireresearch.com. The account, including all surveys and data within it, is disabled immediately. The deleted account and data will be permanently removed from our system within 60 days.
Some residual copies of deleted data may remain on backup media up to 90 days after the deletion has occurred, at which point it will be overwritten. We generally don't use deleted survey data for any purpose, however in limited circumstances, we may retain data for the following legitimate reasons:
To comply with our legal obligations, enforce our agreements, and resolve disputes. In these cases, we ensure that access to the data is blocked except for the purposes for which we have been required to retain the information. The data is deleted as soon as that purpose no longer exists. We also retain aggregate anonymous usage and meta data which doesn't identify you or any of your respondents.
Data Privacy, Security, & Confidentiality
We understand that survey responses can capture a wide range of information, some of which may be sensitive, confidential, or proprietary—both to the account owner and survey takers. Brushfire Research values the trust that our participants, whether they be individuals or large organizations, place in us by letting us be the custodians of their survey data. We aim to be transparent with our privacy practices so there aren't any surprises. We won't use your surveys or information collected from your surveys in any way other than data retention. We make every effort to ensure that your data is handled and stored securely. We also require admins, as a survey creator, to be responsible for good privacy practices for those taking your survey. This can help improve response rates and the survey-taking experience.
Cookies
Cookies are collected through Typeform.com, please refer to their cookies policy.
Payment Information
Payment information is collected through stripe.com, please refer to their privacy policy.
Safety of Minors
Our services are not intended for and may not be used by minors. "Minors" are individuals under the age of 18. Brushfire Research does not knowingly collect personal data from Minors or allow them to register. If it comes to our attention that we have collected personal data from a Minor, we may delete this information without notice. If you have reason to believe that this has occurred, please contact customer support at info@brushfireresearch.com.
Changes to our Privacy Notice
We can make changes to this Privacy Policy from time to time. We will identify the changes we have made on this page. In circumstances where a change will materially change the way in which we collect or use your personal information or data, we will send a notice of this change to all of our account holders.
Related policies: Terms & Conditions, Cookie Policy, SMS Consent & Messaging.