Privacy Policy

The short version

We collect what we need to run your account and nothing more. We do not sell your data. We do not set tracking cookies on your published forms, and we do not load third-party trackers on them — which is why the people who fill in your forms never see a consent banner from us.

This page explains it properly. If anything here is unclear, email hello@crispforms.com and we’ll answer in plain English.

Two kinds of people, two different roles

This distinction matters and is worth getting straight before anything else:

• You, our customer. You have a CrispForms account. For your account data, we are the data controller.
• Your respondents. They fill in forms you built. For the answers they submit, you are the data controller and we are your data processor — we only handle that data on your instructions. Our Data Processing Agreement covers this relationship.

Practically: what respondents are told about their data is your responsibility, because you decide what to ask them and why.

What we collect about you

Account information

• Your name and email address
• A hashed password, if you signed up with one. We never store your password in a readable form and cannot recover it.
• Your profile image and Google account identifier, if you sign in with Google
• Workspace names, membership and roles

Usage information

• Which forms you create and edit, and when — so we can show version history and let you roll back
• Counts of responses, emails and storage used, so we can apply plan limits
• Log data when something errors, including IP address and browser, kept for up to 30 days for debugging and abuse prevention

Payment information

If you subscribe to Pro, payment is handled by Dodo Payments as merchant of record. We never see or store your card details. We receive only a customer identifier, the subscription status, and the billing country needed for tax.

What we collect about your respondents

Only what your form asks for, plus a deliberately small amount of technical data needed to make analytics work:

• The answers they submit, including any files they upload
• Which questions they viewed and how long they spent, so you can see where people drop off
• Approximate country, device type and browser, derived at the moment of the request
• The referring site and any UTM parameters on the link they followed

How we do this without cookies

To count a visitor without tracking them, we compute a one-way hash of their IP address, their browser user-agent, your form’s ID, and a secret salt. The raw IP address is discarded immediately and never written to disk alongside the analytics data. The salt is rotated every day and the old one is destroyed.

The consequence is deliberate: after 24 hours, the same visitor is unrecognisable to us. We cannot follow anyone between days, between your forms, or across the internet. That is the trade we chose — you get completion funnels, nobody gets a tracking profile.

Cookies

On published forms, we set no cookies at all, unless you turn on a feature that requires one — specifically save-and-resume, which stores a token so a respondent can return to a part-finished form.

On the CrispForms app, we set a session cookie so you stay signed in, and store your theme preference. Both are strictly necessary and neither is used for advertising.

On our marketing pages, we use Google Analytics to understand which pages are useful. See our Cookie Policy for the detail.

Who we share data with

We do not sell personal data, and we never will. We share it only with the vendors needed to run the service, each of which is listed with what it does and where it runs on our Subprocessors page.

We will disclose data if legally compelled to. If that happens and we are permitted to tell you, we will.

Third-party accounts you connect

When you connect an integration, we store an access token so we can send your responses where you asked. We request the narrowest scope that will do the job.

Google Sheets is worth calling out: we request only the drive.file scope. That grants access solely to the spreadsheets CrispForms itself creates. We cannot see, open or list any other file in your Google Drive, and we did not ask for the ability to.

How long we keep things

• Account data — while your account is open, then 30 days after deletion, then permanently erased
• Form responses — until you delete them. Pro plans can set an automatic retention window.
• Raw analytics events — 90 days, after which only aggregated daily totals remain. Those aggregates contain no identifiers.
• Error logs — 30 days
• Billing records — as long as tax law requires, typically seven years

Your rights

Depending on where you live, you may have the right to access, correct, export, delete or restrict the processing of your personal data, and to object to it. You can do most of this yourself from your account settings — profile changes, data export and full account deletion are all self-service.

For anything else, email hello@crispforms.com. We’ll respond within 30 days. We won’t make you jump through hoops, and we won’t charge you.

If you are a respondent wanting your answers removed, contact the person or organisation whose form you filled in — they control that data, not us. If you can’t reach them, tell us and we’ll help you find a route.

Security

Data is encrypted in transit with TLS and encrypted at rest. Passwords are hashed. Access to production data is limited to the people who need it. Our Security page describes our practices in more detail.

If you believe you have found a vulnerability, please email support@crispforms.com. We will not pursue legal action against good-faith security research.

International transfers

Our infrastructure runs in the United States and the European Union. If you are in the EEA or UK, your data may be transferred to the US under Standard Contractual Clauses.

Children

CrispForms is not intended for children under 16, and we do not knowingly collect their personal data. If you believe a child has given us data, tell us and we will delete it.

Changes to this policy

If we make a material change, we will email account holders before it takes effect. The date at the top always reflects the current version.

Contact

Privacy questions: hello@crispforms.com