Privacy policy
Last revised 15 September 2026
ezform handles two kinds of data: the account details of the person who signs up, and the submissions their visitors send. This page says what we do with each, how long we keep it and who else touches it.
What a submission contains
Whatever fields your form sends, plus the time it arrived and, for spam and abuse handling, the submitting IP address and origin. We do not add tracking to your form and we do not fingerprint your visitors.
Why we store it before delivering it
A submission is recorded before an email is attempted, because that is the only way a mail outage delays a lead instead of losing it. The record is what makes retries, history and export possible.
How long we keep it
Your submissions stay in your account until you delete them, and you can export them at any time. Deleting a submission, a form or your whole account removes the record and its delivery history with it. We have not set per-plan retention windows, and we will say so here before we do.
Who else processes it
We rely on a small set of established infrastructure, email delivery and payment providers to run the service. Each one sees only what it needs to do its job, and the current list is available on request. We do not sell data and we do not share it for advertising.
AI spam scoring, if you buy it
AI spam scoring is a paid add-on and it is off unless you buy it. With it on, the text of a submission is sent to TypeSafe AI, our AI provider, to answer one question about it: whether it is unsolicited, or how well it matches the description you wrote for that form, whichever that form is set to ask. The model answers with a number and does not write text. Nothing is sent for an account without the add-on, and nothing is sent for a submission the honeypot already caught. We cap what leaves at a thousand characters per field, and it is used to answer that one question and nothing else. Turning the add-on off stops it.
Account data
Your name, email address and authentication records, used to sign you in, to email you about your account, and to bill you if you are on a paid plan. Payment card details are handled by our payment processor and never reach our servers.
Your visitors’ rights
The submissions in your account are yours to correct, export or delete, and requests from the people who sent them should come to you first. We will help you fulfil one, and we will act on a request sent directly to us where the law requires it.
Contact
Questions, deletion requests and anything else: get in touch.