This policy explains how ConsentForms.com ("ConsentForms", "we", "us") collects, uses and shares information when you use our website and service. If you have questions, email support@consentforms.com.
Who this policy covers
- Customers: businesses and people who create a ConsentForms account to build forms and collect submissions.
- Signers: people who fill out and sign a form that a customer shares with them.
- Visitors: anyone browsing our website.
When a signer submits a customer's form, that customer decides what the form asks for and what happens to the answers. We store and process submissions on the customer's behalf. If you signed a form and have questions about your answers, please contact the business that sent you the form. We'll help them respond.
Information we collect
From customers
- Account details: name, email address, password (stored only as a secure hash), and an optional profile photo.
- Sign-in security: your two-factor preference and, if you choose text messages, your phone number.
- If you sign in with Google or Apple: your name, email address and an account identifier from that service. We don't receive your Google or Apple password or access to anything else in those accounts.
- Workspace content: the forms you build, team members you invite, and your settings.
- Billing: your plan and subscription status. Card details are entered on Stripe and never reach our servers.
- Payment processor keys you add so your forms can take payments. These are encrypted before they're stored.
- Support conversations you have with us.
From signers
- The answers, signatures and files entered into a customer's form.
- A record of the signing for the audit trail: name and email if the form asks for them, IP address, browser details and the time of submission, plus a fingerprint (hash) of the submitted content so changes can be detected later.
- If the form takes a payment, card details go directly to the customer's Stripe or Square account. We never see or store card numbers.
Form visit statistics
To show customers how their forms perform, we record when a form is opened, the type of device, browser and operating system, the referring website, country (looked up from the request, then we discard the IP), how far someone gets and how long it takes. We don't store IP addresses for visit statistics. Unique visitors are counted with a one-way code that changes every day, and we don't use tracking or advertising cookies. Country lookup uses GeoLite2 data created by MaxMind, available from maxmind.com.
Cookies
We use a cookie to keep you signed in, a short-lived cookie to remember which workspace you're in, and a cookie to count the two Jarvis demos you can build before signup. Our bot-protection provider may set cookies needed to tell people from bots. We don't use advertising cookies or sell browsing data.
How we use information
- To run the service: build and publish forms, collect and deliver submissions, and keep audit records.
- To secure accounts: sign-in, two-factor codes, fraud and abuse prevention.
- To bill for subscriptions and send receipts and account emails.
- To answer support requests.
- To improve the service, using aggregated information that doesn't identify signers.
We don't sell personal information, and we don't use submissions for advertising.
Jarvis, our AI form builder
When a customer asks Jarvis to build a form, we send their description and any document, photo or web page they provide to our AI provider, Anthropic, to generate the form. Anthropic processes this content to return a result and, under its commercial terms, doesn't use it to train its models. We don't save the uploaded file; only the finished form is kept in the customer's account. Signer submissions are never sent to Jarvis.
Who we share information with
We share information only with service providers that help us run ConsentForms, and only what they need:
- Stripe, to process subscription payments.
- Brevo, to send account and notification emails.
- Twilio, to send sign-in codes by text message, if you choose that option.
- Cloudflare Turnstile, to protect sign-up and forms from bots.
- Google Maps, to suggest addresses when a form includes an address field.
- Anthropic, to power Jarvis, as described above.
- Our hosting provider, which runs the servers where the service and its data are stored.
Payments on a customer's form go to that customer's own Stripe or Square account, under their agreement with that processor. We may also disclose information if required by law, to protect the rights and safety of our users or the public, or as part of a merger or sale of the business, in which case this policy would continue to apply.
Security
Submissions and files are encrypted before they're stored, and payment keys and other secrets are encrypted too. Connections to the site use HTTPS, and passwords are stored only as secure hashes. No system is perfectly secure, but we work to protect your information and will notify affected customers of a breach as required by law.
How long we keep information
We keep account information while your account is open. Customers control their submissions and can delete them at any time. When an account is closed, we delete its data within a reasonable period, apart from copies in backups (which expire on their own schedule) and records we must keep for legal, tax or security reasons.
Your choices and rights
- Customers can view, export and update their information and delete forms and submissions in the app.
- You can ask us to access, correct or delete your personal information by emailing support@consentforms.com. Depending on where you live, you may have additional rights under local law, and we'll honor them.
- Signers should contact the business that sent the form; we'll help that business respond.
Children
ConsentForms accounts are for adults. Customers may use forms to collect information about children, such as a parental consent form, and are responsible for getting a parent or guardian's permission. We don't knowingly let children under 13 create accounts.
Changes to this policy
We may update this policy from time to time. If changes are significant, we'll let customers know by email or in the app. The date at the top shows when it last changed.
Contact
Questions or requests: support@consentforms.com. See also our Terms of service.