Form Drop Sign in

Privacy Policy

Form Drop · Last updated

What Form Drop collects, why, who else sees it, and how to have it corrected or deleted.

Two kinds of data
Information about the people who run accounts, which we look after, and what people submit to forms, which we hold for the account that runs the form.
No tracking
No analytics, no advertising and no tracking cookies. One cookie keeps you signed in.
Never sold
We don’t sell personal information or use it for advertising.
Cards stay with Stripe
Card details are typed into Stripe’s secure card field and go straight to Stripe. They never reach our servers.
Your say
Ask us to see, correct or delete your information at any time.

This summary is here to help you find your way. The full text below is what applies.

01Who we are

Form Drop is run by business name not set (“we”, “us”, “our”). This policy explains how we handle personal information when you visit our website, use the Form Drop dashboard, or fill in a form built with Form Drop.

We follow Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA). Our privacy contact, at contact email not set, is accountable for how we handle personal information and answers questions about this policy.

02Account data and form data

Information about the people who run accounts. For account owners and their staff, we decide what we collect and why. This policy covers all of it.

What people submit to forms. When you fill in a form built with Form Drop, the account that runs it (the organiser, venue or business named on the form) decides what it asks and what it does with your answers. We store and process them on that account’s behalf, to run the service, and for no purpose of our own. That account’s privacy notice covers how it uses your details, so send requests to see, correct or delete them to the account first. If you can’t reach it, contact us and we’ll help.

03What we collect

About account owners and staff

  • Your name and email address, and your account’s name and form address, when you sign up or are added as staff.
  • Your password, stored only as a one-way hash that we can’t read back.
  • When you last signed in, and an activity log of what was done in the dashboard (such as sending files or changing settings) with the name of the person who did it. Staff on the account can see this log.
  • Your account’s settings, forms, wording, logos and images.
  • If you send email through your own mail server: its address, its user name, and its password, which is encrypted before it’s stored.
  • If you connect Stripe: your Stripe account’s ID, name and currency, and whether it can take payments. We never receive or store your Stripe keys.
  • If you subscribe to the Sell plan: your Stripe customer and subscription references, and the plan’s status and renewal date. Stripe holds your card and billing address.
  • Records of what you’ve paid us for, such as delivery batches, with amounts and dates.
  • If you send campaigns: what each one said, who it went to and whether each email went out, who confirmed the account had permission to send it and when, and the mailing address printed at the foot of every campaign.

About people who fill in a form

  • What the form asks for: a first name and email address on every form, plus whatever else the account asks, such as a last name, phone number, choices and written answers.
  • The entry’s number and when it was submitted.
  • On forms that sell: what was ordered, the amount and whether it was paid. You pay in Stripe’s card field on the form, which sends your card details straight to the account’s own Stripe; we receive the payment’s status and Stripe’s reference for it, never your card details.
  • Files the account attaches to your entry to send to you, such as photos or PDFs.
  • If the account emails you a campaign: whether it went out to you. If you unsubscribe, your email address goes on that account’s unsubscribe list, so its campaigns never reach you again.

About everyone who visits

  • Our web server keeps standard logs of the requests it receives, including IP address, browser type, the page asked for and the time, to keep the service running and secure.

04How we use it

We use personal information only to:

  • run the service: show forms, keep entries, send the emails an account asks us to send, and take payments through Stripe;
  • set up and protect accounts: confirm email addresses, sign people in, send password links and keep the activity log;
  • bill for the Sell plan and paid deliveries;
  • send account owners and staff messages about the service, such as verification, password and billing emails and notice of changes to our terms or prices;
  • prevent abuse, fix problems and keep the service secure;
  • meet our legal obligations.

We don’t sell personal information, rent it out or use it for advertising, and we never send our own marketing to people who fill in forms.

05Cookies and outside resources

Form Drop sets one cookie: a session cookie that keeps staff signed in and protects every form against forged submissions. It works only on this site, scripts can’t read it, and your browser deletes it when you close it. Staff are signed out after 8 hours without activity.

We don’t use analytics, advertising or tracking cookies. On forms that sell, Stripe’s card field runs on the page and sets its own cookies to prevent fraud; Stripe also sets cookies on its checkout and billing pages. Both are under Stripe’s privacy policy.

Our pages, and many forms, load their fonts from Google Fonts. Your browser fetches them from Google, which receives your IP address and browser details under Google’s privacy policy.

06Who we share it with

We share personal information only with the service providers that help us run Form Drop, only what each needs, and only for that job:

  • Stripe processes payments on forms (on each account’s own Stripe) and our billing for the Sell plan and deliveries.
  • Our email provider delivers verification, password and billing emails, and the files and campaigns sent through our mail server. When an account uses its own mail server, its file and campaign emails go through that server instead.
  • Our hosting provider runs the servers that Form Drop and its data are stored on.
  • Google Fonts serves the fonts our pages use.

The account that runs a form can see everything submitted to it, export it, and email the person on an entry, including campaigns, which always carry an unsubscribe link. Accounts can’t see each other’s data.

We may also disclose information when the law requires it, to protect someone’s safety or our legal rights, or to anyone who takes over our business, who would remain bound by this policy.

Some of these providers, including Stripe and Google, process information outside Canada, including in the United States. There it’s subject to local law and may be accessible to courts and authorities in that country.

07How long we keep it

  • Accounts. We keep an account’s information while the account is open. When it closes, we delete its forms, entries, files and staff accounts within 30 days, except billing records.
  • Billing records. We keep these for as long as tax law requires, generally six years in Canada.
  • Form entries. These are kept until the account that collected them asks us to delete them, or closes.
  • Files. Files attached to an entry stay with it after they’re sent, so they can be sent again, until the entry or the account is deleted. Files chosen but never sent are deleted when they’re taken out of the batch.
  • Campaigns. A campaign’s record (what it said, who it went to and how each email went) stays with the account. Its unsubscribe list is kept while the account is open, so the account keeps honouring it.
  • Server logs. These are kept only as long as we need them for security and troubleshooting.

08How we protect it

  • Passwords are stored as one-way hashes, and mail server passwords are encrypted before they’re stored.
  • Each account’s data is walled off from every other account’s. Staff can see only the account they belong to.
  • Staff sessions end after 8 hours without activity, and repeated wrong passwords lock sign-in for a while.
  • Card details are handled by Stripe and never reach our servers.

No system is perfectly secure. If a breach puts your information at real risk of significant harm, we’ll tell you, and report it to the Privacy Commissioner of Canada as the law requires.

09Seeing, correcting and deleting

You can ask us to:

  • tell you what personal information we hold about you, and give you a copy;
  • correct anything that’s wrong;
  • delete your information, or close your account;
  • stop a use of your information you no longer consent to, where we can.

Write to contact email not set. We’ll answer within 30 days, and we may need to confirm who you are first. If your information came to us through a form, we may pass your request to the account that runs the form, since it decides what happens to that information.

If you’re not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada, or to the privacy authority where you live.

10Children

Form Drop accounts are for adults. Some forms are filled in by parents or guardians for their children, or ask about children; the account that runs the form is responsible for getting the consent the law requires. If you think a child’s information reached us without that consent, contact us and we’ll help remove it.

11Changes to this policy

We’ll update this policy when our practices change, and change the date at the top of this page. If a change is significant, we’ll email account owners before it takes effect.

12Contact

Questions, requests and complaints about privacy go to contact email not set. See also our Terms of Service.