Privacy Policy

Last updated: 2026-04-28

What we collect

• Account data: email address, display name. Used for sign-in and to address you in product communication.
• Tenant data: events, forms, sections, themes, custom domains you configure. Stored only to render your sites.
• Submission data: whatever your guests fill into your forms. You are the data controller; we process on your behalf.
• Billing data: handled entirely by Stripe; we store only the customer/subscription IDs.
• Operational logs: HTTP access logs (truncated IPs) for 30 days for security and debugging.

What we don't collect

• No third-party advertising trackers.
• No fingerprinting or session recording.
• No analytics on the public registration sites unless you opt in via your tenant settings.

Your rights

You can export everything we store about your tenant or request deletion at any time from /admin/privacy. Submitters can request deletion of their individual record via the unsubscribe link in the confirmation email.

Sub-processors

• Stripe (payments)
• Postmark or AWS SES (transactional email — see your tenant settings)
• Hosting provider (Vercel / Fly.io / Neon — TBD at deploy time)

Retention

Tenant data is retained while your subscription is active. After deletion request, we purge within 30 days. Backups roll off within 90 days.

Contact

DPO: [email protected]. We respond to GDPR requests within 30 days as required.