Privacy Policy

HayForm ("we", "us", or "our") operates the form builder service at app.hayform.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

Account information. When you sign up, we collect your name and email address via Google OAuth. We do not store your Google password.

Form data. We store the forms you create (fields, settings, branding) and the responses submitted to those forms by your respondents.

Usage data. We automatically collect basic usage information such as pages visited, browser type, and IP address to improve our service.

Payment information. If you subscribe to a paid plan, payments are processed by Stripe. We do not store your credit card number. Stripe's privacy policy applies to payment data.

We use the information we collect to:

• Provide, operate, and maintain the service
• Process your forms and deliver responses to you
• Send form responses via your configured integrations (WhatsApp, email, webhooks, Google Sheets, Notion, Airtable)
• Process payments and manage your subscription
• Communicate with you about service updates
• Detect and prevent fraud or abuse

We do not sell your personal information. We share data only in the following cases:

• Integrations you enable. When you connect an integration (e.g., Google Sheets, webhooks), form response data is sent to those third-party services as configured by you.
• Service providers. We use Supabase (database and authentication), Stripe (payments), and Vercel (hosting) to operate our service.
• Legal requirements. We may disclose information if required by law or to protect our rights.

Your data is stored in Supabase (powered by PostgreSQL) with row-level security policies. All data is transmitted over HTTPS. We implement industry-standard security measures to protect your information, including encrypted storage of sensitive credentials and HMAC signature verification for webhooks.

We retain your account data and form responses for as long as your account is active. When you delete your account, we permanently remove your profile, forms, and all associated responses from our database.

You have the right to:

• Access your personal data through your account dashboard
• Export your form responses
• Delete your forms, responses, or entire account
• Update your profile information in Settings

We use essential cookies for authentication and session management. We do not use third-party tracking cookies or advertising cookies.

HayForm is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us so we can delete it.

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our service. Your continued use of HayForm after changes constitutes acceptance of the updated policy.

If you have any questions about this Privacy Policy, please contact us at hello@hayform.com.