Privacy policy
Last updated 25 August 2026
Formwire is a form backend. Site owners paste a snippet into their pages; when a visitor submits it, we receive the submission, store it, and deliver it to the chat channels the site owner connected. This page explains what we do with data in both roles: as a service for site owners, and as the recipient of their visitors' submissions.
Who is responsible for what
For submission content, the site owner is the controller and Formwire is the processor: they decide what to ask visitors and why, we store and deliver it on their instructions. For account data — the site owner's own email, billing, and usage — we are the controller.
What we store from a submission
- The field names and values the form sent.
- A two-letter country code, derived from the request.
- A hash of the IP address — sha256 of the IP plus a salt that rotates daily, truncated. We never store the IP itself, and the daily rotation means the hash cannot be used to follow someone across days.
- The time, the form it came from, and a spam score with the reasons for it.
We do not store the full user agent, we do not fingerprint devices, and there are no third-party trackers or analytics scripts involved in receiving a submission.
How long we keep it
Retention depends on the site owner's plan — 14 days on Free, one year on Pro, three years on Business. Each submission is stamped with its own expiry when it is stored, and a scheduled database job deletes expired rows daily. This is enforced by the database, not by a policy someone has to remember.
When a plan changes to a shorter retention, existing submissions get a 30-day grace period before the shorter window applies, so a billing change never deletes data the same day.
Who else sees it
The chat services a site owner connects — Discord, Slack, Telegram, or their own webhook — receive the submissions delivered to them. That is the point of the product, and it happens only where the site owner set it up. Our own subprocessors are listed on the trust page.
Your rights
- Access and portability: a site owner can export everything their account holds as JSON, from the dashboard, at any time.
- Erasure: deleting an account removes every form, submission, channel and record belonging to it immediately. We keep only the account id, the deletion date, and the payment-provider customer id, for seven years, because tax law requires it.
- If you are a visitor who submitted a form and want it removed, contact the site owner: it is their data, and they can delete it from their dashboard. If you cannot reach them, write to us and we will help.
Formwire does not send email notifications. The only email we send is a sign-in link, sent by our auth provider when you sign in or are invited to an account.
Contact
privacy@formwire.dev. Security reports go through security.txt.