Security Policy

Security Statement v1.45 - 7 January 2008

Security is a high priority at SuperSurvey. We maintain security on a number of different levels.

First, we use usernames and passwords to ensure that our users are the only ones who can access their own surveys' creation and results. These passwords are stored in an encrypted form in our database and should be transmitted only over HTTPS (secure Web). However, the a password may remain in a user's browser cache and may be transmitted over a non-secure channel, including email. To be certain that your session is closed out, we recommend that you close down your web browser completely, as you would after leaving a brokerage or banking site. We also recommend changing your password regularly. Lost passwords are provided only to the holder of the email address on record.

Second, we use "keys" to control access to survey taking. Each survey maker may choose the type of key system to be used for each survey. Although we provide this facility for controlling access, we cannot control the correct choice of keying method or its proper application. We recommend that each user judiciously choose the type of key system that fits his/her needs, and maintain control over the distribution of keys and invitations to his/her survey. We also advise users that unless a survey is conducted under secure sockets layer (see below), the survey and responses may be transmitted in a non-secure manner.

Third, we use secure sockets layer (SSL) encryption for handling customer login and survey creation, purchase transactions, and as an option for conducting surveys. SSL is the industry standard for credit card transactions, and all of our transmissions of financial information are done under SSL. Since the data produced through our surveys and the information contained in the survey questions themselves are often very valuable and confidential to our clients, we conduct survey creation, distribution, and results viewing transactions under SSL. Customers therefore must use SSL in order to take advantage of this service. Surveys set for SSL security will not function without SSL, which may prevent some survey takers from being able to respond.

Internal security helps protect us and our clients, as well. Data that we store on behalf of our clients are stored on separate computers that are not connected to the Internet and are backed up daily. Our servers are stored in secure facilities with backup power and Internet connections. Only those with a need to know are permitted access to these computers and data.

We ask your assistance in maintaining security by understanding these policies and recommendations, and we welcome any comments or suggestions you may have, at service@supersurvey.com.