Privacy policy

What we store

Creators: your account email, name (if given), authentication records, and the forms you create — drafts, published versions, and the responses they collect.
Respondents: only what the form's creator asks you to answer. No respondent account is created, and form responses do not require AI services.

What we do not do

We do not sell data. We do not send form answers, prompts, or secrets to analytics or error-tracking services. Analytics (if enabled) uses cookie-less measurement and excludes the operator's own test account.

Processors

The hosted service relies on a database host, an email provider (transactional email such as verification, password reset, and optional submission notifications), AI model providers (OpenRouter) used only when a creator generates a proposal, and error reporting (Sentry, redacted payloads). Public form submission does not call AI providers.

Emails

Transactional only: address verification, password resets, and (if the form creator enables it) a submission notification to the creator. No marketing email.

Retention and deletion

Deleting a form permanently removes its submissions. Account deletion is available on request while the product is in beta.

Self-hosting

The open-source version runs on your own infrastructure; you control the database, keys, and processors.

Contact

Privacy questions: the contact address published on the hosted instance.