Privacy Policy
Last updated August 15, 2026
1. What we collect
Account data: your email, organization name, and role. Form submission data: whatever your sites' visitors submit through your contact forms, typically a name, email, message, and any custom fields you've configured. Security logs: login and account-security events (IP address, user agent, timestamps), retained for one year and then purged automatically.
2. How we use it
To operate the Service: authenticate you, deliver submission notification emails, enforce account limits, and protect the Service and its customers from abuse (CAPTCHA bot verification, AI spam screening, rate limiting). We don't sell your data or your visitors' submission data, and we don't use it for advertising.
3. Who we share it with
We use a small number of subprocessors to run the Service: Stripe for billing, Resend for outbound email delivery, and OpenRouter for AI spam screening of submissions. Each only receives the data needed to perform its function (e.g. Stripe never sees your form submissions). Bot verification (CAPTCHA) is self-hosted, so no third party is involved. We don't share data with anyone else except where required by law.
4. Security
Two-factor authentication is required on every account. Passwords are hashed, API keys are stored as salted hashes (never in plaintext), and TOTP secrets are encrypted at rest. All traffic is served over HTTPS.
5. Cookies
We use a single session cookie to keep you signed in. We don't use third-party advertising or tracking cookies.
6. Data retention and deletion
Submission data is retained until you delete it or delete the site that collected it. Security logs are purged after one year. If you close your account, we delete your organization's data within a reasonable period, except where we're required to retain it (e.g. billing records).
7. Your rights
You can access, export, or delete most of your data directly from the admin panel. For anything else, including requests from someone whose data was submitted through one of your forms, contact us.
8. Changes to this policy
We may update this policy from time to time. Material changes will be reflected by updating the date above.
9. Contact
Questions about this policy? Contact us.