Use Research Rill responsibly and keep control of your surveys.

Survey owners are responsible for lawful content and distribution; Research Rill enforces product limits, safety controls, and retention rules.

Effective August 17, 2026

This policy describes the current V1 product and operational behavior. If Help text conflicts with this policy, this policy controls.

Accounts and credentials

An owner account is identified by an account name and passphrase. You are responsible for keeping the passphrase confidential and for activity performed through your authenticated account.

Research Rill may invalidate sessions, disable an account, or require re-authentication when needed for security or administration.
V1 has no email-based passphrase recovery. Losing the passphrase can mean losing access to the account.

Service scope and limits

Research Rill provides survey authoring, respondent collection, results, and paid per-survey unlock capabilities subject to the documented product limits.

Free and unlocked surveys have different question, response, invitation, conditional-logic, and export limits. Limits are enforced by persisted capability state and server-side validation.
The service may be unavailable during failures, maintenance, provider outages, or protective rate limiting. Research Rill does not promise uninterrupted operation.

Survey-owner responsibilities

Survey owners control the survey questions and distribution choices and are responsible for their survey content and intended use.

Do not create or distribute content that violates applicable law, the Acceptable Use Policy, or another person's rights.
Collect only data you are entitled to collect and provide any notices, consent, lawful basis, or additional safeguards your use case requires.
Do not use public or invitation links for spam, harassment, deception, or distribution to people you are not permitted to contact.

Respondents and invitations

Public survey links are possession-based and do not promise one response per person. Single-use invitations promise one completed response per invitation, not verified human identity.

Rate limiting and capacity controls protect the service but are not identity verification.
Invitation URLs are capabilities. Owners are responsible for distributing them appropriately and protecting downloaded invitation files.

Survey unlocks and payments

An unlock applies to one survey, not the whole owner account. The configured one-time amount and currency are authoritative for automated Ko-fi processing.

A valid purchase must correlate to exactly one survey using its signed purchase code. Donor identity is not used as the entitlement key.
A confirmed refund or chargeback may revoke the unlock and move the survey to restricted state without deleting its existing definition or collected results.

Moderation and enforcement

Research Rill may suspend a survey or disable an owner account for abuse, policy, security, or operator-review reasons.

Suspension hard-stops respondent collection while preserving survey data and lifecycle history. Account disable invalidates owner sessions and can suspend owned surveys.
Private administrative reason details are not exposed to respondents.

Retention and deletion

Use of the service is subject to the retention behavior described in the Privacy Policy and Help.

Free content can be automatically closed after 180 days and permanently purged after 360 days of owner inactivity when eligibility and hold checks succeed.
Unlocked and restricted surveys are excluded from that automatic free-content purge in V1; owners may still use the documented archive/deletion flow.
Primary deletion can precede expiration of pre-existing disaster-recovery backups. Recovery copies age out according to the operational backup window.

Policy changes and notices

These V1 terms may be updated when product or operational behavior changes. The effective date on this page identifies this version.

Survey-specific safety, privacy, or content concerns can be submitted with the “Report this survey” flow.
Notices that require correspondence or attachments need a separately published production-operator contact channel. Operator legal identity/contact details remain a public-launch input and are not fabricated by the application.