Formfeed privacy & data

is the controller for this website and the Formfeed service.

sends us your email address, your name, the identifier of your account there

it records the page, the referring website, browser, operating system, device type, screen size, language and the country derived from your IP address

we keep the email address, language, time and the page they came from

Any personal data the customer includes in template data: names, addresses, contract and invoice details, identifiers.

the account data of the customer's users

Stripe sees billing contact and payment data, never document data.

we use the statistics only to see which pages are read and which lead to sign-ups

Errors in the app, the API and the render servers are reported to Sentry

Rendering PDF and image documents from templates and customer data

operating the service (logs, metering, support)

Purpose: accounts, templates, render metadata, fonts

Purpose: sign-in links, invitations, quota and billing notices, and tips and product news for those who subscribed.

Purpose: subscriptions, invoices, tax.

Account data, including the campaign values and click id of an organisation, is deleted 30 days after you delete the organisation.

delete these entries by 14 September 2027 at the latest, or earlier when you ask us to.

Rendered documents are deleted at the end of the configured retention period.

When the organisation is deleted, all data is removed within 30 days, backups within a further 30 days.

no persistent storage of customer data

Accounts, templates and rendered documents are stored and rendered in the EU

EU-only processing

the project is hosted in Frankfurt (AWS eu-central-1)

Rendered documents and uploaded files are stored in the EU only, unless a workspace configures its own storage destination (bring your own storage)

The emails are sent through Resend, Inc. (USA, EU standard contractual clauses).

The providers above are engaged under GDPR-compliant agreements with standard contractual clauses where a transfer of account or billing data occurs.

Every service provider involved is listed at formfeed.dev/legal/subprocessors.

Document data you send to the API is processed on your behalf under our data processing agreement (formfeed.dev/legal/dpa).

to have them removed from an organisation that already exists, write to hello@formfeed.dev.

You have the rights of access, rectification, erasure, restriction, portability and objection (Art. 15–21 GDPR)

the right to lodge a complaint with a supervisory authority

We forward requests from data subjects to the customer without undue delay and assist with technical means (export, deletion of specific renders or data).