This policy explains how FormSubmit ("we", "us") handles personal data when you use formsubmit.app. It covers two groups: account holders (people who sign up and create forms) and submitters (people who fill in forms that use FormSubmit).
Roles
- For account data, FormSubmit is the data controller.
- For submission data, the account holder who owns the form is the controller and FormSubmit acts as a processor on their behalf, under our Data Processing Addendum.
Data we collect
Account holders
- Google account name, email address and profile picture, received when you sign in with Google.
- Billing information handled by our payment provider (we don't store card numbers).
- Usage data such as forms created, submission counts and storage used.
- If you connect Google Sheets, OAuth tokens scoped to
drive.file(only files FormSubmit creates). - Integration credentials you provide, stored encrypted.
Submitters
- Whatever fields the form owner chose to collect, and any files uploaded.
- Technical metadata: a salted hash of the IP address (never the raw IP), user agent, referring page, origin and approximate country.
How we use data
- To provide the service: receive, store, filter, email and forward submissions as configured by the form owner.
- To prevent abuse: rate limiting, spam detection and security monitoring.
- To bill and support account holders and send essential service emails (for example usage warnings).
We do not sell personal data and do not use submission content for advertising or to train models.
Retention
Account data is kept while your account is active. Submission data is kept according to each form's retention setting (forever, 1 year, 90/30/7 days or not stored) and deleted when the form owner deletes it or closes their account.
Sub-processors
We use infrastructure providers for hosting and compute, database hosting, file storage, transactional email and payment processing. A current list is available on request at support@formsubmit.app.
Security
Data is encrypted in transit (TLS) and at rest by our providers; integration secrets are additionally encrypted with AES-256-GCM; uploaded files are private and accessed via authenticated or expiring signed links. See security & privacy.
Your rights
Depending on where you live you may have rights to access, correct, delete, restrict or port your data, and to object to processing. Account holders can export and delete data from the dashboard. Submitters should contact the owner of the form they submitted; we'll assist form owners with requests.
International transfers
Data may be processed in countries other than yours. Where required we rely on appropriate safeguards such as standard contractual clauses.
Contact
Questions: support@formsubmit.app.