SYS · PALSENT · v1.0 · OPERATIONALWK·21 · COMPANY HEALTH: 74 · 5 SURVEYS THIS QUARTER14-DAY FREE TRIAL · NO CARD REQUIRED

Anonymity Policy

Palsent is built on a simple promise: your responses are private. Here is exactly how that promise is kept.

What we collect

When you submit a survey response, Palsent records only your answers — a numeric value for scale questions, a selected option for multiple-choice questions, or free text for open-ended questions. Nothing else is stored alongside your response.

What we never collect

Your name, email address, employee ID, device fingerprint, and IP address are never stored with your response. The survey link is scoped to a team, not to you as an individual. Two people on the same team receive the same link.

How responses are aggregated

All scores are computed at the team level. Palsent averages the responses from everyone on a team, then applies a weighted formula across four dimensions (Morale, Burnout Risk, Manager Support, Work Clarity) to produce a single Health Score between 0 and 100. No individual answer is ever surfaced in the results view.

The anonymity threshold

Results are only shown once a team reaches a minimum number of respondents — by default, 3. If fewer responses have been received, the results page shows a “Not enough responses” notice instead of any data. This prevents anyone from inferring a single person’s answer by process of elimination. HR Admins on the Pro plan can raise this threshold; it cannot be lowered below 2.

Who can see what

HR Admin
Sees aggregate team scores and AI-generated summaries. Cannot query or export raw response rows.
Manager
Sees the same aggregate view as the HR Admin, scoped only to their own team. Has no access to other teams' data.
Executive
Read-only view of org-level trends and team rankings. Cannot drill into individual question data.
Survey respondent
Submits responses through a one-time, token-scoped link. Receives no confirmation email and no account is created.

Data retention

Survey responses are retained for as long as the organisation's account is active. When an account is deleted, all associated response data is permanently removed within 30 days.

Questions?

If you have concerns about how your data is handled, contact your HR Administrator. They can direct your question to the Palsent support team.