Formstork

Privacy Policy

Last updated: July 2026

This Policy explains how Formstork (“we”, “us”) handles personal data. We act as a data controller for account data, and as a data processor for the form submissions you collect through our service on behalf of your own end users.

1. Data we process

2. How we use data

To deliver form notifications, provide the dashboard, prevent spam and abuse, send transactional and login emails, and provide support. We do not use your data for advertising and never sell it.

3. Where data is stored

Data is hosted in the European Union (Germany). Transactional email is sent through Amazon SES in the EU (Frankfurt) region.

4. Sub-processors

We use a small set of providers to run the service: Amazon Web Services (hosting is self-managed; SES for email), our payment provider (billing), and Google (only if you connect Google Sheets, and only for the sheet you authorize). Each processes data solely to provide their service to us.

5. Retention

Free-plan form submissions are kept for 90 days; on paid plans they are kept until you delete them or close your account. Account data is kept while your account is active and for a short period afterwards, then deleted.

6. Your rights (GDPR / KVKK)

You may access, correct, export, or delete your data, and object to or restrict certain processing. Contact us to exercise these rights. Deleting your account removes your submissions and account data.

7. Security

Data is transmitted over TLS. Integration secrets are encrypted at rest (AES-GCM). Databases are not exposed to the public internet, and access is key-based.

8. Contact

Privacy questions: hello@formstork.com.