Last updated: September 29, 2026
This policy covers the website at upform.com, the app at app.upform.com and the forms our customers publish with Upform.
The short version
- We collect what we need to run your account: your email address, a password or Google sign-in, your profile and the forms you build.
- When someone fills in a form built with Upform, the form's creator controls the answers. We process them on the creator's behalf.
- We do not sell personal data or use it for advertising.
- The upform.com website sets no cookies of its own and runs no analytics.
- You can ask to access, correct, export or delete your data at any time.
Who we are
Upform is operated by INKYY Bojan Sandić s.p. Laktaši, a sole proprietorship (samostalni preduzetnik) registered in Bosnia and Herzegovina at Kozarska ulica 12, 78250 Laktaši, Bosnia and Herzegovina and operating since 14 May 2019. You can also reach us by phone at +387 65 302 657. In this policy, "Upform", "we" and "us" mean that company. For any privacy question, email hello@upform.com.
Controller or processor: whose data is it?
The controller decides why and how personal data is used; the processor handles it on the controller's instructions. Upform can be either, depending on whose data it is.
- Account holders and website visitors. Upform is the controller.
- Respondents. For answers submitted to a form, the person or organization that published the form (the creator) is the controller and Upform is the processor. The creator decides what to ask, why, where answers go and how long they are kept. Our commitments to creators are in the data processing agreement.
If you filled in a form, contact the organization behind it about your answers; their privacy notice applies. If you cannot reach them, write to us.
What we collect from account holders
Account, profile and content
When you sign up, we collect your email address and a password, or the name, email address and profile picture Google shares if you use Google sign-in. Passwords are stored only as a one-way hash, and we never receive your Google password. In Settings you can add your full name, company, address and an avatar, and choose how often we email you about new responses. We also store your plan, storage use and team membership, plus the forms, logic rules, designs, themes and images you create or upload.
Integrations
When you connect Google Sheets, Slack, HubSpot, Klaviyo, Mailchimp, monday.com or Notion, you sign in with your own account for that tool. We store the access credentials it issues and the settings you choose, such as which sheet or list to use, and read only what is needed to offer those choices. For custom webhooks and n8n, we store the URL you give us and the secret used to sign requests. Google Analytics is connection-only: no form data is sent to it. A Google Forms import copies the form you pick into Upform, one way.
Upform's use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. We use that information only to provide the feature you turned on, and never for advertising.
Team members
On Pro, an owner can invite up to five members by email. We store each invite's email address, permissions and status.
Upgrading to Pro
There is no checkout in Upform. Pro is arranged by emailing hello@upform.com and we upgrade accounts manually. We keep that correspondence and the billing contact details you send, such as a name, company and billing email, for your plan and the business records the law requires. We do not collect payment card details through the website or the app.
Correspondence and technical data
If you email us, we keep your message so we can reply. When you use the app, our infrastructure receives technical data such as your IP address, browser, device and request times, which we use to deliver the service, keep it secure and fix problems.
What we process about respondents
Respondents never create an Upform account. On behalf of the form creator, we process:
- Answers, with the submission time and whether the form was finished. A submission has no respondent column: it holds the answers and nothing else pointing at a person. Names, emails and companies it contains also appear in the creator's contacts directory.
- Uploaded files from a File Upload question, stored in a storage area scoped to the form that collected them.
- Analytics events for views, starts and submissions: the time, completion time, device type (desktop, tablet or mobile), browser, operating system, user agent and a country estimated from the browser's time zone. We do not record a city or precise location. The event for a submission is stored with a reference to that response. Creators see these events as totals in their Results panel.
- A visitor ID (upform_visitor_id), a random value created in the respondent's browser so one person opening a form twice counts once. It is not derived from anything about the person, and it is not shared with other sites or used to follow people across them.
- reCAPTCHA signals. Google reCAPTCHA v3 runs invisibly on public submissions and collects browser and interaction data, including IP address, to tell people from bots. We verify the result on our server, and every published form shows a notice saying so.
We use reCAPTCHA results and technical data about submissions for one purpose of our own: keeping Upform free of spam and abuse. For that limited use, Upform is the controller.
On submission, answers are stored and sent to every integration the creator connected. The creator's agreement with that tool then governs the copy held there.
What we collect from website visitors
The website sets no cookies of its own, runs no analytics and uses no tracking pixels. To display pages, your browser requests the typeface from Google Fonts (fonts.googleapis.com and fonts.gstatic.com) and an animation library from cdnjs (cdnjs.cloudflare.com, run by Cloudflare). These requests include your IP address and browser details, and the service that hosts the website may keep standard request logs. Our contact form is itself a published Upform form: its answers are stored in Upform and posted to our team's Slack so we can reply.
Why we use data, and our legal bases
Under EU, UK and Swiss data protection law, each use of personal data needs a legal basis. Where Upform is the controller, we rely on these:
| Purpose | Data used | Legal basis |
|---|---|---|
| Running your account and the features you use, including publishing forms and connecting integrations | Account, profile, form content, integration settings | Performing our contract with you |
| Password resets, response notifications and team invites | Email address, notification setting | Performing our contract with you |
| Setting up Pro and keeping business records | Billing contact details, correspondence | Contract and legal obligation |
| Answering questions and support requests | Correspondence, contact form answers | Legitimate interests |
| Delivering the website and app, and keeping them secure and free of spam and abuse | Technical data, reCAPTCHA signals | Legitimate interests |
| Complying with the law and defending legal claims | Only what the situation requires | Legal obligation, legitimate interests |
If we ever email product news, each message will include a way to opt out, and we will ask for consent where the law requires it. reCAPTCHA scores only filter spam; we make no solely automated decisions with legal or similarly significant effects. Storing and delivering respondents' answers is done only on the creator's instructions, and the creator is responsible for having a legal basis and informing respondents.
Who we share data with
We share personal data only with:
- Supabase, our infrastructure provider, which runs the database, authentication, file storage and server functions for us.
- [App hosting provider], which serves the Upform app to your browser.
- Email delivery services that send password resets, team invites and response notifications for us.
- Google, for reCAPTCHA, Google sign-in, Google Forms import and Google Fonts, under Google's own Privacy Policy.
- Slack, where our team receives contact form messages.
- Integrations a creator connects, which receive each new response under the creator's own account and their own terms.
- Team members on Pro, who share the owner's workspace and can see its forms and responses within the permissions the owner sets.
- Authorities and professional advisers, when the law requires it, to enforce our terms or to protect the rights and safety of users and others.
- A buyer or successor if Upform is sold or merged. We would require them to honor this policy for data collected under it.
International transfers
Upform's database and file storage are hosted in [Data hosting region], and you cannot choose another region. Some providers, such as Google, may process data elsewhere, including the United States, and tools a creator connects store data wherever they operate. When data from the EEA, UK or Switzerland goes to a country without an adequacy decision, we rely on safeguards such as the European Commission's Standard Contractual Clauses or the UK equivalent. Ask us for details.
How long we keep data, and how deletion works
- Your account is kept while it is open. To close it, email hello@upform.com from your account address, and we delete your account, forms, responses, files and connections from the live service.
- Responses and files are controlled by the creator, who can delete single responses, many at once, or whole forms. We keep them as long as the creator does, or until the creator's account is closed.
- Analytics events are kept for the creator's Results panel and deleted when the creator's account is closed. Deleting a response does not remove the events that counted it, and those events hold no answers.
- Billing records are kept for as long as tax and accounting law requires.
- Correspondence is kept as long as needed to handle your request.
- Backups held by our infrastructure provider can retain deleted data for a limited period until they are overwritten.
Deleting a response in Upform does not delete copies already sent to Google Sheets, HubSpot or other connected tools. The creator removes those there.
How we protect data
Row-level security runs on every public table, roles sit in a separate table checked by a security-definer function, uploads are scoped per form, forms stay private until published and public submissions pass through reCAPTCHA, on Free and Pro alike.
We do not hold a SOC 2 report or ISO 27001 certificate, and we do not sign HIPAA business associate agreements, so do not use Upform for protected health information, card numbers or passwords. The full picture is on our security page. If a breach affects your personal data, we will notify you and the relevant authorities as the law requires.
Your rights and how to use them
Depending on where you live, you may have the right to:
- Access your personal data and receive a copy.
- Correct it. Most profile details can be edited in Settings.
- Delete it, apart from records we must keep by law.
- Export it in a machine-readable format. Creators can also export responses as CSV at any time.
- Object to processing based on legitimate interests, and to direct marketing.
- Restrict processing while a correction or complaint is resolved, and withdraw consent where we rely on it.
Email hello@upform.com from your account address with your request. We may need to confirm your identity. We reply within one month, or tell you within that month if a complex request needs longer, as the law allows. We will never treat you differently for asking. Respondents should contact the form creator first; if you write to us, we will pass your request on and help the creator respond.
If you live in a US state with a consumer privacy law that applies to us, such as California, you have similar rights to know, correct and delete your information. We do not sell personal information or share it for cross-context behavioral advertising. You can also complain to a data protection authority where you live or work, though we would appreciate the chance to fix things first.
Cookies and browser storage
The website sets no cookies of its own. The app and published forms keep these items in your browser:
| Item | Where | Purpose | How long |
|---|---|---|---|
| Sign-in session | Upform app, local storage | Keeps you signed in | Until you sign out or it expires |
| upform_visitor_id | Published forms, local storage | Counts a returning respondent once in the creator's analytics | Until the browser storage is cleared |
| Visit session markers | Published forms, session storage | Group one visit's events and measure completion time | Until the tab closes; a visit ends after 30 minutes of inactivity |
| reCAPTCHA | Published forms, Google cookies | Tell people from bots on submission | Set and controlled by Google |
The app and published forms also load typefaces from Google Fonts, so your browser sends your IP address to Google when a page opens. You can clear or block the items above in your browser settings. You will then need to sign in again, and forms will count you as a new visitor.
Children
Upform accounts are not intended for children, and we do not knowingly open accounts for anyone under 16. Creators whose forms may reach children are responsible for any parental consent the law requires. If you believe a child has given us personal data, email us and we will delete it.
Changes to this policy
We update this policy when the product or the law changes, and the date at the top shows the current version. If a change materially affects how we use your data, we will tell account holders by email or in the app before it takes effect.
Contact us
Privacy questions, requests and complaints go to hello@upform.com, or by post to INKYY Bojan Sandić s.p. Laktaši, Kozarska ulica 12, 78250 Laktaši, Bosnia and Herzegovina.