Privacy Policy

Who we are

CraftyForms is a form creation and data capture platform. This policy explains what data we collect when you use CraftyForms, how we use it, and the choices you have.

When we say "CraftyForms", "we", "us", or "our", we mean the team operating this service. When we say "you", we mean either a form creator (someone who builds and manages forms) or a respondent (someone who fills one out).

Data we collect from form creators

When you create an account:

• Your email address and name, used to identify your account
• Authentication data (password hash or OAuth token from Google if you sign in with Google)
• Your IP address and browser/device type, logged at sign-in for security

When you build and manage forms:

• Form definitions — the questions, logic, and settings you configure
• Response data submitted to your forms
• Files uploaded by your respondents (images, audio, video) stored in our file storage
• Usage metadata — when forms were created, viewed, and edited

Data we collect from respondents

When someone fills out a CraftyForms form:

• The answers they provide — text, selections, file uploads, or other media
• Submission metadata — timestamp, approximate location (country/region), device type, and referrer URL
• If the respondent is logged in to a CraftyForms account, their user ID is associated with the submission
• If a draft is saved anonymously, it is stored in local browser storage on the respondent's own device and never sent to our servers until submitted

We do not collect more than what is needed to operate the service. We do not build advertising profiles.

How we use your data

• To provide the service — storing, displaying, and delivering form data to the form owner
• To authenticate users and keep accounts secure
• To send transactional emails (account confirmation, password reset) — no marketing emails without explicit opt-in
• To generate aggregate, anonymous analytics about form completion rates and usage patterns
• To meet legal obligations if required

File and media storage

Files uploaded through forms (images, audio recordings, video) are stored in Supabase Storage, hosted on infrastructure within the region you or the form creator selected. Files are accessible only to the form owner and, where the form logic allows it, to the respondent who uploaded them.

Files are retained for as long as the form exists and the account is active. When a form is deleted, associated files are scheduled for permanent deletion.

Who we share data with

We do not sell your data. We do not share it with third parties for advertising.

We use the following sub-processors to operate the service:

• Supabase — database, authentication, and file storage

We may disclose data if required by law, a court order, or to protect the safety of users or the public. We will notify you where legally permitted to do so.

Data retention

Account data is retained for as long as your account is active. If you delete your account, your data is permanently deleted within 30 days, except where retention is required by law.

Form response data is owned by the form creator. Creators can delete individual submissions or entire forms at any time. Deletion is permanent.

Your rights

You have the right to:

• Access a copy of the personal data we hold about you
• Correct inaccurate data
• Request deletion of your account and associated data
• Export your data in a machine-readable format
• Object to how we process your data

To exercise any of these rights, contact us at the address below. We respond within 30 days.

Cookies

We use only the cookies necessary to keep you signed in and to maintain your session. We do not use advertising or tracking cookies.

Children

CraftyForms is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has submitted data through a form, contact us and we will remove it promptly.

Changes to this policy

If we make material changes, we will update the date at the top of this page and notify account holders by email where appropriate. Continued use of the service after changes constitutes acceptance.

Contact

Questions about this policy or data requests: privacy@craftyforms.com