Privacy policy
Who handles your data?
Sacha Dumont, publisher of FormHush, handles service administration and support. For customer forms, the customer is the controller and FormHush acts on their instructions under our data processing agreement. Contact hello@formhush.com.
Purpose, data and legal basis
We receive message text, optional names and email addresses to classify and route enquiries. Customers determine the lawful basis for their forms and must inform senders. Service administration and support are necessary to perform our agreement. Abuse prevention serves our legitimate interest in securing the service. A daily salted hash derived from the connecting IP enforces rate limits; we do not store the raw IP in the submission database.
Before sending a message to Jev, we mask email addresses and phone numbers in its text. Separate name and email fields are never sent to Jev. Masking is not full anonymisation: other personal information in free text may remain. Do not submit passwords, payment card details or sensitive personal data. Demo text is not stored by FormHush.
Retention
Submissions and related notification jobs are automatically deleted after 30 days by a Worker task running every five minutes. This also applies to unsorted and undelivered messages. Rate identifiers expire within one day plus the cleanup interval. Monthly usage counters contain no message text and are removed after about one year. Payment event identifiers are retained for replay protection while the billing integration is operated; they contain no submission content. Copies delivered to your chosen channels follow those recipients' retention policies. FormHush does not create a separate application backup of submissions; infrastructure recovery copies follow the hosting provider's lifecycle.
Providers and recipients
- Cloudflare, Inc.: website, Workers, D1 storage and optional cookieless Web Analytics.
- TypeSafe AI (Jev), United States: classification of masked message text when AI is enabled.
- Polar: Merchant of Record for checkout, subscription payments and billing records; its own privacy and legal retention rules apply to payment processing.
- Email delivery provider: not yet selected or enabled. This list will identify the provider before email delivery is activated.
- Customer-selected Slack, Telegram and webhook destinations receive forwarded submissions on the customer's instructions.
Processing may involve countries outside the European Economic Area, including the United States. Before activating a provider, applicable processing terms and a lawful transfer mechanism, such as standard contractual clauses or an applicable adequacy decision, must be in place. This notice does not claim that an unconfigured integration is already operating.
Your rights
Contact the form owner for access, correction, deletion, restriction, portability or objection relating to a form submission. We assist the controller. For service administration data, contact hello@formhush.com. Where consent is the basis, you may withdraw it. You may complain to your competent data protection authority. Classification is advisory and can be reviewed by a person; it is not a decision about legal rights.
Cookies and analytics
Account keys stay in the current tab's memory, without cookies or persistent browser storage. Optional Cloudflare Web Analytics measures aggregate traffic and performance without cookies or local storage. No advertising trackers are included.