1. Who we are

This policy covers the Poll Maker: Voting & Ratings app (“the app”) for Wix websites. The apps are made and operated by Dmytro Bieliaiev, an independent developer based in Serbia (“we”, “us”), and are distributed through the Wix App Market. Privacy questions and requests: bieliaiev.d@gmail.com.

2. Who this policy is for, and our role

The policy explains what information the app handles, why, where it is kept and what choices you have. It concerns two groups of people:

  • Site owners — Wix users who install the app on their site (including people the owner lets manage the site). For information about you as our customer — your installation, plan and the messages you send us — we decide how it is used and act as an independent controller. Wix is a separate controller for your Wix account.
  • Site visitors — people who visit a site where the app is installed. Whatever the app handles about visitors, it handles on behalf of the site owner and only as the owner’s settings say. The site owner is the controller of that information and we act as their processor. If the app collects visitors’ information on your site (section 3 says whether it does), mention it in your own site’s privacy policy. Visitors who have questions about their data should contact the site owner first; we help site owners answer such requests.

3. Information the app processes

Polls (entered by the site owner): questions, options, images, thank-you messages, redirect links, voting settings, appearance settings, saved themes, custom styles and, optionally, a webhook address. Stored in the site’s Wix collections.

Votes (sent by visitors): the chosen option(s) or ranking, a random token created in the visitor’s browser and a keyed one-way hash of the visitor’s network (IP) address and the poll’s ID, made with a secret key that exists only on the app’s server. It is used only to stop the same person voting twice in the same poll; without the key it cannot be recomputed or turned back into an address, and it cannot be matched across polls. The network address itself is never stored. Votes cast before 31 October 2026 carry the earlier unkeyed hash of the address and the poll’s ID.

Members-only polls (if the site owner chooses this): the app asks Wix whether the visitor is logged in as a site member and, if the site owner limits a poll to members with certain badges, which badges the member holds. To allow one vote per member it stores a keyed one-way hash of the member’s ID and the poll’s ID; the ballot itself contains no member information.

Email addresses (only if the site owner turns on email collection): a visitor may enter an email address with their vote. It is stored in the site’s Wix collection and shown only to the site owner, who can export it.

Webhooks (only if the site owner enters a webhook address): each vote (poll, question, chosen options and current results) and each email address left with a vote is also sent to that address. The site owner chooses that service and is responsible for it.

Results: vote totals and a count of votes over time, shown to the site owner and — as the owner chooses — to visitors.

4. Cookies and browser storage

The app does not set any cookies. It keeps the random vote token in the visitor’s localStorage so a visitor is not asked to vote again on a device where they already voted; the token leaves the device only as part of a vote. In the site owner’s dashboard, localStorage remembers whether the sample content was already added and whether a short review request was already shown.

5. Third-party services

The app uses no analytics, tracking or advertising services of its own. If the site owner picks a Google font for a poll, visitors’ browsers load it from Google Fonts (fonts.googleapis.com, fonts.gstatic.com), which receives the visitor’s network address as with any web request (Google Privacy Policy). Without a Google font, no request goes to Google. The optional webhook (section 3) sends data to the service the site owner chose.

6. How long data is kept, and how to delete it

Polls, votes and email addresses stay in the site’s Wix collections until the site owner deletes them. Deleting a poll in the dashboard also deletes its votes and email addresses; the site owner can also delete rows in the site’s CMS.

7. Information we receive about site owners

When you install, use or pay for an app, Wix makes the following available to us in our developer account: your site’s address and internal site and app-installation IDs, whether the app is installed, the plan you chose, its billing period, trial and subscription status and dates, and the editor your site uses. Payments are processed by Wix; we never receive card or bank details. If you write to us, we receive your email address and what you write. Reviews you publish on the App Market are public under Wix’s terms. The app itself reads your site’s plan from Wix to decide which features are available.

  • To provide the app and the features of your plan, and to answer your support requests — performance of our contract with you (GDPR Art. 6(1)(b)).
  • To keep the app working and safe — to prevent abuse (for example the spam limits described in section 3), fix errors and decide what to improve — our legitimate interests (Art. 6(1)(f)). For this we look at installation-level figures (installs, plans), not at profiles of individual people.
  • To keep records required by tax and accounting law — legal obligation (Art. 6(1)(c)).

Information about visitors is processed only to run the features the site owner turned on, on the site owner’s instructions; the site owner decides the legal basis for it.

We do not sell personal information, do not share it for cross-context behavioural advertising, do not build advertising profiles and do not use visitors’ information for our own purposes. We make no decisions with legal or similarly significant effect based solely on automated processing.

9. Where information is stored and who processes it

The apps run on Wix’s app hosting and keep their data in the site’s own Wix collections and settings. We do not run servers or databases of our own for the apps and do not copy site data out of Wix. Service providers involved:

  • Wix.com — app hosting, database, email and notification delivery, payments (Wix Privacy Policy).
  • Google (Gmail) — our support mailbox, for the messages you send us.
  • Any other service only where section 5 names it.

Wix and its providers may process data outside your country, including in the United States, under the safeguards described in Wix’s policy. We access the information in section 7 from Serbia through Wix’s developer dashboard.

10. How long information is kept

Information an app stores on a site (section 3) stays in that site’s Wix collections or settings until the site owner deletes it — section 6 explains how. Uninstalling an app may leave its collections in the site’s CMS; the site owner can delete them there. Installation and billing information stays in our Wix developer account as long as Wix provides it; payment records are kept as long as tax law requires. Support emails are kept as long as needed to handle your request and its follow-up.

11. Security

All traffic is encrypted (HTTPS). Owner-only actions are checked against the Wix login of the site’s owner or its collaborators. Where an app has to recognise repeat submissions, it stores one-way hashes made with a server-side secret key, never network addresses. Each feature collects only what it needs. If we learn of a security incident affecting your data, we inform Wix and the affected site owners without undue delay.

12. Your rights and choices

Depending on where you live — for example under the EU or UK GDPR, the Serbian Law on Personal Data Protection, or US state laws such as the CCPA — you may have the right to access, correct or delete your personal information, to receive a copy of it, to restrict or object to its processing and to withdraw consent.

  • Site owners: delete the app’s content at any time in the app’s dashboard (section 6), uninstall the app, or email us to exercise any right.
  • Site visitors: contact the owner of the site you visited — they control the information, and we help them.

We answer within 30 days and may need to confirm your identity first. Exercising a right never changes how we treat you. You can also complain to your local data-protection authority; in Serbia this is the Commissioner for Information of Public Importance and Personal Data Protection (poverenik.rs).

13. Children

The apps are made for businesses and site owners and are not directed at children. We do not knowingly collect children’s personal information. Owners of sites aimed at children are responsible for any consent their visitors’ parents must give.

14. Changes to this policy

When the way an app handles information changes, we update this page, its “Last updated” date and the change history below. If a change materially affects how personal information is used, we publish it here at least 14 days before it takes effect and also show a notice in the app’s dashboard.

15. Contact

Dmytro Bieliaiev, Serbia — bieliaiev.d@gmail.com

Change history

  • 31 October 2026 — the vote hash is now made with a server-side secret key; before, it was an unkeyed hash of the network address and the poll’s ID, which someone with access to the site’s votes collection could match by trying every possible address.
  • 31 October 2026 — added members-only voting, webhooks and dashboard storage, which the previous text did not describe. Rewritten in the common format used for all our apps (roles, legal bases, rights, retention and how changes are announced).