Privacy Policy

Ikiform handles two different kinds of personal data, and our role is different for each.

• Your account data: the details you give us when you sign up, join the waitlist, invite a teammate or pay. We decide how this is used, so we are its controller.
• Form submissions: what visitors type into the forms on your website. You decide what your forms collect and what happens to it. You are the controller, and Ikiform is your processor. We store and deliver submissions only to run the service for you.

If you filled in a form on someone else's website and want your data changed or deleted, contact that website. They own the form and can delete the submission. If you can't reach them, email us and we'll pass the request on.

Account and sign-in

• Your name, email address and whether you've confirmed it.
• If you sign in with Google or GitHub: your name, email address and profile picture from that provider, and the tokens it gives us to complete sign-in. We don't get your password.
• If you sign in with an email code: the code, stored hashed, which expires after 10 minutes.
• For each signed-in session: the IP address and browser user agent it started from, so you can spot sessions that aren't yours.

Workspaces and teams

• Workspace names, who is a member and their role.
• Email addresses you invite. Invitations expire after 7 days.
• Email addresses you add to receive notification emails for a form.
• API key names and a hash of each key. We never store the key itself.

Billing

• Dodo Payments collects your payment details. Card numbers never reach Ikiform.
• We keep your Dodo customer and subscription IDs, your plan, billing interval, subscription status and billing dates.
• When you start a plan, a record of the box you ticked to start right away: which account ticked it, the version of the wording, when, and the country Cloudflare detects from your connection.

Waitlist

• Your email address, which sign-up button you used, when you confirmed, and a hash of your IP address used to stop abuse.

Form submissions, on your behalf

• The fields your visitors submit. You choose these.
• Metadata for each submission: a hash of the sender's IP address (never the address itself), browser user agent, the origin and referring page, the country Cloudflare detects from the connection, and any subject or reply-to address the form sets.
• A spam score and the reasons behind it.
• Webhook endpoint URLs you add, and a log of each delivery attempt, including a short snippet of your server's response.

Service logs

• Cloudflare records requests to Ikiform (such as time, path and status) so we can find and fix errors. These logs are kept for up to 7 days.

• To run Ikiform: sign you in, store submissions, deliver webhooks and show your dashboard.
• To send emails you need: sign-in codes, team invitations, form notifications, usage and limit warnings, and billing notices.
• To confirm your waitlist signup and tell you when Ikiform launches.
• To block spam and abuse: rate limits and spam checks use hashed IP addresses.
• To bill you, through Dodo Payments.
• To answer you when you write to us.
• To meet legal obligations, such as keeping tax records.

We don't sell personal data. We don't show ads. Ikiform's public website uses OneDollarStats to count visits: it records the page, the referring site, and your country, device, operating system and browser as totals, without cookies. The dashboard doesn't load it.

We only look at the contents of form submissions when you ask us to (for example, to debug a problem), when needed to stop abuse of the service, or when the law requires it.

Spam checks are automatic and can mark a real submission as spam. Form owners can see every submission marked as spam in the dashboard. These checks don't have legal or similarly significant effects on anyone.

Where laws like the GDPR apply, we rely on:

• Contract: to provide the service you signed up for.
• Legitimate interests: to keep Ikiform secure and free of spam and abuse.
• Consent: for the waitlist, which you confirm by email and can leave anytime.
• Legal obligation: for billing and tax records, and the record that you asked us to start your plan right away.

Ikiform uses a small number of services to run. Each one only gets the data it needs for its job. We'll update this list, and our sub-processor list, before adding a new one.

Your webhooks send submissions to the endpoints you choose, and notification emails go to the addresses you set. Those recipients are under your control, not ours.

We only share data with police, courts or government bodies when the law requires it. See Law enforcement requests.

Ikiform runs on Cloudflare's global network. The database is hosted by Cloudflare in Asia-Pacific, so data may be stored and processed outside your country. Requests may be handled in Cloudflare data centers close to the person making them, which can be outside your country.

Ikiform is run from India. When data moves out of the EU, UK or Switzerland, we rely on the EU Standard Contractual Clauses, with the UK and Swiss additions, in our own Data Processing Agreement and in the data processing terms of Cloudflare and Dodo Payments.

Because data is stored outside your country, courts and authorities in the countries where it is stored may be able to reach it under their laws.

• Account and workspace data: while your account is open, until you delete it as described below.
• Workspaces without a plan: your forms stop accepting submissions, but your data stays and you can still export it. We'll email workspace owners at least 30 days before we delete data from a workspace without a plan.
• Sign-in sessions: they expire 30 days after your last activity.
• Sign-in codes: 10 minutes. Invitations: 7 days.
• Form submissions: until you delete them. Deleting a submission removes it and its webhook deliveries right away.
• Deleted forms: a deleted form stops accepting submissions and disappears from the dashboard and API right away. Its submissions, webhook delivery logs, notification records, schema versions, extra notification recipients and webhook endpoints scoped to that form are then permanently deleted, usually within a few minutes and always within 24 hours. Webhook endpoints that cover all forms are kept. Monthly submission counts, which hold no submission content, are kept as billing records.
• Deleted workspaces: API keys, webhooks, forms, members and invitations stop working right away, and any plan is cancelled. Submissions, webhook logs and notification records are then permanently deleted within 24 hours, the same way as deleted forms. Subscription records and monthly submission counts are kept as billing records.
• Deleted accounts: your account, sign-in methods and sessions are deleted right away, along with any workspace where you were the only member.
• Submissions marked as spam: 30 days.
• Submissions held because a workspace went over its limit: 30 days.
• Webhook attempt logs: 30 days. Webhook delivery records: 90 days.
• Notification email records: 90 days.
• Waitlist: until Ikiform launches and we've told you, or until you ask to be removed.
• Billing records, including the record that you asked us to start your plan right away: as long as Indian tax and accounting law requires, currently up to 8 years.

Deleted data can stay in Cloudflare's database recovery history for up to 30 days. It isn't used from there except to recover from a failure, and is gone after that.

• Sign-in cookies, named starting with ikiform, keep you signed in. They're needed for the dashboard to work.
• Short-lived cookies during Google or GitHub sign-in protect that step from forgery.
• Your light or dark theme choice is saved in your browser's local storage.

There are no analytics or advertising cookies; our visit counter doesn't use cookies or local storage. On forms that use Cloudflare Turnstile, Cloudflare may use its own cookies to tell people from bots.

Depending on where you live, you can ask to see, correct, export or delete your personal data, or object to how we use it.

You can delete your account, or a workspace you own, yourself in the dashboard settings.

Write to hello@ikiform.com from the address on your account. We'll answer within 30 days. You can also complain to your local data protection authority.

Workspace owners can delete submissions in the dashboard or through the API, and can export them as CSV or through the API at any time.

If you're in the United States

• Ikiform doesn't sell or share personal data, as the California Consumer Privacy Act uses those words, and doesn't use it for targeted advertising.
• In the last 12 months we collected the data described under What we collect: identifiers such as your name and email address, commercial information such as your plan and billing records, and internet activity such as session and request logs. We use it only for the purposes under How we use it.
• You can ask to know, correct or delete your personal data by emailing us. We won't treat you differently for asking. Someone you authorise in writing can ask for you.
• For form submissions, Ikiform is a service provider, or processor, to the website that owns the form. Requests about that data go to them.

If you're in India

• Under the Digital Personal Data Protection Act, 2023, Ikiform is the data fiduciary for your account data and a data processor for form submissions.
• You can ask to access, correct or erase your data, withdraw consent you gave (such as for the waitlist), and nominate someone to act for you if you die or can't act yourself.
• Our grievance contact is Preet Suthar, at hello@ikiform.com. We'll respond within 90 days, and usually much sooner. If you're not satisfied, you can complain to the Data Protection Board of India.

• Every submission is scoped to its workspace. Only that workspace's members and API keys can read it.
• IP addresses from form posts are hashed with a secret before they're stored.
• API keys are stored as hashes. Webhook signing secrets and Turnstile secrets are encrypted.
• Ikiform is served over HTTPS and only sends webhooks to HTTPS addresses. Every webhook is signed using the Standard Webhooks format with HMAC-SHA256.

More detail is on our Security page.

No system is perfectly secure. If a breach affects your data, we'll tell you without undue delay, and tell the authorities where the law requires, such as the Data Protection Board of India.

Ikiform accounts are only for people aged 18 or over. If we learn that an account belongs to someone younger, we'll close it and delete its data.

Our customers' forms may be filled in by anyone. If a form is aimed at children, its owner needs our written agreement and any parental consent the law requires, as our Acceptable Use Policy says. If you think a child's data is in a form on Ikiform, tell the website that owns the form, or email us.

If we change this policy, we'll update the date at the top. If the change is significant, we'll email account owners before it takes effect.

Preet Suthar, an individual based in India. Email hello@ikiform.com.