Privacy
Forms carry names, addresses and signatures. Here is exactly where they go.
Who can read responses
Your account, and nobody else. Not us.
Where it is kept
On servers in the United States, encrypted in transit and at rest.
What leaves our servers
When a PDF has no form fields of its own, the blank form is read once, by a third party, to work out the questions. Responses are never sent anywhere, and nothing we send is used to train anything. Notification emails name the form, never the answers.
How long it is kept
As long as the form’s owner chooses — a form can be set to delete its responses automatically after a set time, or to keep them until someone removes them. Any single response can be deleted on its own, and deleting a form removes every response and the uploaded PDF with it. Nothing deleted can be recovered. Files built for printing or download are deleted a day after they are made.
What we do not do
No advertising, no selling or sharing with anyone not listed above, no tracking across other sites.
If you filled in someone else's form
Your answers belong to whoever asked for them, not to us. They can delete your response by itself, without touching anyone else’s — so ask them, or write to us and we will put you in touch.
Questions about any of this? Ask.