Legal

Privacy Policy

Last updated: June 3, 2026

This Privacy Policy explains how All Web Forms ("we") handles personal data when you use allwebforms.com (the "Service"). We act as a data controller for account data and as a data processor for form submissions you collect.

1. Data we collect

  • Account data: name, email, hashed password, billing details.
  • Usage data: pages visited, device, IP, referrer, and product analytics.
  • Customer Content: forms you build and responses your respondents submit.
  • Cookies: essential cookies for auth and limited analytics cookies.

2. How we use data

  • To provide, secure, and improve the Service.
  • To process payments and prevent fraud or abuse.
  • To communicate about updates, security, and product changes.
  • To comply with legal obligations.

3. Legal bases (GDPR)

We rely on contract performance, legitimate interests (security and product improvement), consent (where required for marketing or non-essential cookies), and legal obligations.

4. Sharing

We share data only with sub-processors that help us operate the Service, including:

  • Cloud hosting and database providers
  • Email delivery providers
  • Payment processors
  • Analytics and error monitoring services

We do not sell personal data.

5. International transfers

Where data is transferred outside your region, we use appropriate safeguards such as Standard Contractual Clauses.

6. Retention

Account data is kept while your account is active and for a reasonable period thereafter. Customer Content is retained per your settings; deleted forms and submissions are purged within 30 days from backups.

7. Your rights

Depending on your jurisdiction, you may have the right to access, correct, delete, port, or restrict processing of your data, and to object or withdraw consent. Contact privacy@allwebforms.com to exercise these rights.

8. Security

We use encryption in transit (TLS), encryption at rest for sensitive fields, scoped access controls, row-level security on our database, and regular reviews of our security posture.

9. Children

The Service is not directed to children under 16 and we do not knowingly collect their data.

10. Changes

We may update this policy and will post the revised version with a new "Last updated" date.

11. Contact

Privacy questions: privacy@allwebforms.com.