TafitiLens ("we", "our", "us") is operated by Peter Kariuki. This policy explains what information we collect, how we use it, and your rights. By using TafitiLens you agree to this policy.
Account information. When you sign up we collect your email address and a hashed password, stored securely in Supabase.
Survey data. Survey forms you upload (XLSForm or XForm files) are stored in a private Supabase storage bucket associated with your account. Survey responses submitted by your respondents are written directly to a Google Sheet in your own Google Drive — we do not store response data on our servers.
Google account connection. If you connect your Google account, we store an OAuth refresh token that allows us to create and write to Google Sheets on your behalf. We request only the drive.file scope, which limits our access to files that TafitiLens itself creates. We never access, read, or modify any other files in your Google Drive.
Usage data. We may log basic request metadata (timestamps, endpoints called) for debugging and service reliability. We do not use third-party analytics trackers.
We do not sell your data. We do not use your data for advertising.
TafitiLens uses Google APIs to create and write to Google Sheets, and, if you use the bulk survey-invitation tool, to send email and manage a campaign spreadsheet on your behalf. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Core survey pipeline (drive.file). We use the drive.file OAuth scope to create Sheets and write survey submission data into them. We do not read, modify, or share any Google user data beyond what is necessary to provide this feature to you.
Bulk survey-invitation tool (drive.file, mail-sending permission). If you choose to use the bulk email tool to invite respondents to a survey, it runs under your own Google account, sending from your own Gmail address and using your own sending quota — TafitiLens never has standing access to your mailbox. We request:
drive.file — used to create and update a campaign-tracking spreadsheet in your own Google Drive, recording the recipient list, send status, and email open/click activity for that campaign. This spreadsheet is created fresh per campaign, lives in your Drive, and is not accessed by us outside of writing this campaign data. If you choose to import recipients from an existing spreadsheet, that file is only ever accessed after you explicitly select it through Google's own file picker — TafitiLens has no standing access to your wider Google Drive.Data accessed via these scopes is used solely to provide the bulk-invitation feature to you and is not transferred to any third party, used for advertising, or used to train AI/ML models.
You can revoke TafitiLens's access to your Google account at any time via your Google Account permissions page.
We use the following sub-processors to operate the service:
We do not share your personal data with any other third parties except as required by law.
Your account data is retained for as long as your account is active. Survey forms are retained until you delete them. Survey responses live in your own Google Sheet — we do not hold copies. Bulk-invitation campaign data (recipient list, send status, open/click log) likewise lives in a spreadsheet in your own Google Drive — we do not hold copies of it either. You can request deletion of your account and associated data by emailing hello@tafitilens.com.
We use HTTPS for all data in transit, and industry-standard encryption at rest via Supabase/AWS. OAuth tokens are stored encrypted. However, no system is perfectly secure — please use a strong, unique password for your account.
TafitiLens is not directed at children under 13. We do not knowingly collect personal information from children.
We may update this policy from time to time. We'll notify you of material changes via the email on your account. Continued use of the service after changes constitutes acceptance.
Questions about this policy? Email us at hello@tafitilens.com.