Acceptable Use Policy

Phishing and credential harvesting

• Don't collect passwords, one-time codes, recovery phrases, seed phrases, private keys or any other login secret, for any reason.
• Don't build forms that pretend to be another company, bank, government body or person to get people's data.
• Ikiform checks every submission for field names that look like login or payment secrets. When it finds one, it holds the form's notification emails and may pause the form while we review it.

Spam and unwanted messages

• Don't use Ikiform to send spam, or as a way to send email to people who didn't ask for it.
• Don't add people to notification lists without their permission. Extra recipients must confirm by email before they get anything.
• Don't sign people up to mailing lists through your forms without the consent the law where they live requires.

Harmful content and software

• Don't use forms, redirects or webhooks to spread malware, or to link to it.
• Don't collect, store or share child sexual abuse material, or anything that sexualises minors. We remove it, close the account, keep the evidence the law requires and report it to the authorities.
• Don't use Ikiform to harass, threaten, stalk or dox anyone, or to promote violence or hatred against people.
• Don't use Ikiform for fraud, scams, fake giveaways or schemes that trick people into paying or giving data.
• Don't infringe anyone's copyright, trademark or other rights.
• Don't use Ikiform for anything illegal where you, your visitors or we are based.

Deceptive collection

• Don't hide who is collecting data. Your form or its page must say who you are.
• Don't collect data you have no right to collect, or use it for something your visitors weren't told about.

Ikiform is built for everyday forms: contact, signup, feedback, orders, applications. It is not built to hold the most sensitive kinds of data. Some data is never allowed. Some is allowed only if we agree in writing first.

To ask for a written agreement, email hello@ikiform.com before your form goes live. Tell us what you collect, why, and which laws apply to you. We may say no.

If a visitor types restricted data into a form on their own, for example a card number in a message box, that isn't a breach of this policy. Delete it when you see it. It is a breach if your form asks for it.

• Don't probe, scan or test the security of Ikiform without our written permission. See the security page for how to report a problem.
• Don't load test Ikiform, or send traffic designed to get around rate limits, spam checks or submission limits.
• Don't open extra accounts or workspaces to get around limits, a suspension or a ban.
• Don't use Ikiform to attack, flood or probe other systems, including through webhook URLs.
• Don't resell Ikiform, or give other people access to your API keys as a service, without our written agreement. Agencies may run forms for their own clients.
• Don't copy Ikiform's service or scrape its website or dashboard in bulk.

To protect everyone, Ikiform limits how fast forms can receive posts and how many emails they send. These limits can change as we learn about new abuse.

Submission limits for each plan size are described in the Terms of Service.

If you see an Ikiform form being used for phishing, spam or anything else on this page, email abuse@ikiform.com. Every notification email Ikiform sends has a link to do this.

Include the page address where you saw the form, and the form ID if you have it. The form ID starts with frm_ and is in the address the form posts to. We read every report.

Copyright and other legal complaints are covered on the Abuse and takedown page.

We act in proportion to the harm. Depending on what we find, we may do one or more of these, in any order:

• Hold a form's notification emails or webhooks while we look into it.
• Ask you to change or remove a form.
• Pause or disable a form.
• Remove content or submissions that break the law or this policy.
• Suspend a workspace or account.
• Close an account for good.
• Report illegal activity to the authorities, and keep the records we need to do so.

Usually we email the workspace owners first and give them time to fix the problem. We act first and explain after when there is active harm to people, such as phishing or malware, or when the law requires it. We won't tell you if the law or an active investigation stops us.

If you think we got it wrong, reply to our email or write to abuse@ikiform.com. A person will review it. If we close an account for a serious or repeated breach, the Refund Policy applies and no refund is due for the rest of the period.

We update this policy when new kinds of abuse appear. We'll change the date at the top. Changes that make the rules stricter apply to new forms right away and to existing forms 30 days after we email account owners, unless the change is needed to stop active harm.