When you create an account, we collect your business name, email address, and the password you choose (which is stored as a salted bcrypt hash, not in plain text). When you build forms, we store the form configuration and any submissions sent to those forms on our servers.
When you visit our marketing pages, we log aggregate visit counts using a privacy-respecting tracker that hashes IP addresses with a per-install salt so individual visitors cannot be re-identified.
Your account info is used to authenticate you and to send you transactional emails (signup verification, password resets, submission notifications). Form submissions are stored so you can view, export, and respond to them. We do not sell your data, and we do not show third-party ads inside the product.
We use a session cookie strictly to keep you logged in. We do not use third-party advertising or tracking cookies.
We use Google reCAPTCHA on the signup form to prevent automated abuse. This sends your IP and limited browser information to Google as part of the reCAPTCHA challenge. We also use SMTP to send emails through our configured email provider.
You can request access to, correction of, or deletion of your personal data at any time by emailing us. Account deletion removes your forms and submissions.
Questions about this policy? Email us via the support address on our homepage.