Home/Privacy Policy

Privacy Policy

Effective date: April 14, 2026

1. Who we are

Form Dump ("we", "our", or "us") provides a form backend service that lets developers and AI agents collect form submissions without running a server. Our service is accessible at formdump.com.

2. Data we collect

We collect two categories of data:

Account data

When you register, we collect your email address and a hashed password (or OAuth tokens if you sign in via a third-party provider). We use this to authenticate you and send service-related emails.

Submission data

When someone submits a form that points to your Form Dump endpoint, we store the full payload (field names and values), the submission timestamp, the submitter's IP address, and metadata used for spam scoring. You own this data; we process it on your behalf.

Usage data

We collect standard server logs (request timestamps, endpoint IDs, HTTP status codes) and aggregate analytics to understand product usage. We do not sell this data.

3. How we use your data

  • To provide and maintain the Form Dump service
  • To send you email notifications and auto-responder emails you have configured
  • To process Stripe payments and manage your subscription
  • To detect and filter spam submissions
  • To forward submissions to webhook URLs you have registered
  • To respond to your support requests
  • To improve the service using aggregated, anonymised analytics

We do not sell your data or submission data to third parties.

4. Third-party services

We use the following sub-processors:

  • Supabase — database and authentication hosting
  • Stripe — payment processing (we never see or store full card numbers)
  • Vercel — application hosting and edge functions
  • Resend / SMTP provider — transactional email delivery

5. Cookies

We use a single session cookie to keep you logged in. We also load Google Analytics (GA4) to measure aggregate traffic. Google Analytics may set its own cookies; you can opt out via your browser settings or a browser extension.

6. Data retention

Account data is retained for as long as your account is active. Submission data is retained until you delete the form or close your account. On account deletion, all your forms and submissions are permanently removed within 30 days.

7. Your rights

Depending on your location, you may have the right to access, correct, delete, or export the personal data we hold about you. To exercise any of these rights, email us at support@formdump.com.

If you are in the European Economic Area, you also have the right to lodge a complaint with your local supervisory authority.

8. Security

We use TLS for all data in transit and encrypt sensitive fields at rest. Access to production data is restricted to authorised personnel. However, no system is 100% secure and we cannot guarantee absolute security.

9. Children

Form Dump is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has submitted data through our service, please contact us and we will promptly remove it.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify registered users by email at least 14 days before material changes take effect. The effective date at the top of this page will always reflect the most recent version.

11. Contact

Questions about this policy? support@formdump.com