Privacy Policy

Enform helps you build forms and make sense of what people tell you. This page covers what we collect, who helps us run the service, and how long we keep things.

The short version

• We never sell your data or your respondents' answers.
• Our servers and database run in Germany.
• You can delete forms and responses yourself, and ask us to delete your account at any time.

What we collect

Your account. Your email, your name, and a hashed password if you set one. If you sign in with Google, Google shares your email, name and profile picture with us. For each signed-in session we also keep the IP address and browser it came from, to keep your account safe.

What you make. Your forms, your conversations with the AI builder, files you upload, website links you ask us to read, and your workspace and team details.

Responses to your forms. The answers people give and any files they upload. With each response we also record the respondent's IP address, browser, the country their IP points to, the page that sent them, and any campaign tags or ad click IDs in the link. We use these to count views, filter out bots, show you where responses come from, and send the conversion events you turn on.

How you use Enform. Pages you visit and features you use on enform.co and in the app. Once you sign in, this is linked to your account. We don't record your screen.

Payments. Our payments partner handles your card. We only see your plan and billing status.

How we use it

• To run Enform: sign you in, save and publish your forms, collect responses and show them to you.
• To read responses with AI when you ask for a summary or a deck.
• To email you: sign-in codes, invitations, response alerts, billing, and a few tips when you're getting started.
• To keep the service safe and working: rate limits, spam and bot checks, and error reports.
• To understand which features help people, so we know what to fix next.

When a deleted form is cleared for good, we keep a de-identified record of its structure and totals. It never includes answers or anything that identifies a respondent.

AI

Enform uses AI models to build forms and to read responses. When it does, we send the content the task needs to an AI provider and get the result back. Our AI providers today are OpenAI, Anthropic and Google.

Who helps us run Enform

These companies process data for us. Each one gets only what its job needs.

• Hetzner runs our servers and database in Germany.
• Cloudflare handles our domains and network traffic, and stores uploaded files and backups.
• OpenAI, Anthropic and Google run the AI models described above.
• Resend delivers our emails.
• PostHog records product analytics. It never receives the contents of responses.
• Dodo Payments processes subscription payments.
• Google handles Sign in with Google and, if you connect it, Google Sheets and Drive exports.
• Tavily helps the AI builder search the web. It gets search terms, never responses.

Tools you connect

You can send responses to other tools, like Slack, HubSpot, Airtable, Mailchimp, Notion, Google Sheets, webhooks and ad platforms such as Meta. You can also connect an AI assistant to your account. When you do, we send the data you chose to that tool. From there, its own privacy policy applies.

If you filled out a form

The person or business that made the form decides what it asks and what happens to your answers. We store and process them on their behalf. To see, change or delete your answers, contact them first. If you can't reach them, email [email protected] and we'll help.

Where your data lives

Our servers and database are in Germany. Some of the providers above, like OpenAI and PostHog, process data in the United States.

How long we keep it

• Your account data stays while your account exists.
• A deleted form can be restored for 30 days. After that, it's deleted for good, along with its responses.
• Responses you delete are removed right away.
• If you ask us to delete your account, we delete it with your forms and responses within 30 days. We keep billing records where the law requires it.
• We take nightly backups. Deleted data drops out of them as older backups expire.

Cookies

We use a cookie to keep you signed in, and an analytics cookie from PostHog to see how enform.co and the app are used. Forms hosted on enform.co can set the same analytics cookie. If you arrive from one of our Google ads, Google Ads can set a cookie so we can see whether the ad led to a signup. We don't use it for anything else.

When you first visit enform.co from another site, we keep a note of that site and any campaign tags in a cookie for 90 days, so we know how people find us. It never includes anything you type.

If a form's owner adds tracking, like a Meta pixel, that service can set its own cookies on their form.

Your rights

You can ask for a copy of your data, or ask us to correct or delete it. Email [email protected] and we'll reply within 30 days. You can delete forms and responses yourself at any time inside Enform.

Changes

If we change this policy in a way that matters, we'll tell you by email or in the app before it takes effect.

Contact

Questions about this policy or your data? Email [email protected].