If you create forms (account holders)
To sign in we use your email address. You may sign in with a one-time emailed link, or — if the operator has enabled it — with a password or with your Google account. When Google sign-in is enabled, our home page and sign-in page load a script from Google (accounts.google.com) so Google can offer you its one-tap prompt; this happens when the page loads, before you choose anything, and Google may therefore see that you visited it. It happens only on those two pages — never on a form, and not on this page. If you then sign in with Google, Google sends us a signed token identifying you, which includes your name and profile picture as well as your email; we use and keep only the email address (the minimum needed to identify your account) and discard the rest. We store your email, your display name, the forms and workspaces you create, and a record of significant actions on your account (an audit log), so the service works and stays accountable.
If you fill in a form (respondents)
You do not need an account to answer a form. When you submit one, we store the answers you gave, and a small amount of technical context derived from your request: approximate city, your network or internet provider, and your device type, operating system and browser. This context is low-entropy and worked out on our servers from the connection — we do not fingerprint your device and do not run third-party tracking scripts on the form.
Please note this is accountless, not anonymous: your answers and the context above are visible to the members of the workspace that owns the form. Do not put information in a form that you are not comfortable sharing with the organisation that published it.
Who processes your data for us
We do not sell your data. We use a small number of service providers strictly to run the product: Cloudflare (hosting, storage and sending our emails), Google (on our home and sign-in pages when Google sign-in is enabled, and when you sign in with Google — never on a form), and Stripe (only if you pay for a paid plan; card details go to Stripe, not to us).
How long we keep it
Form responses are kept for 12 months, then permanently deleted after a short grace period — the data is removed, not merely hidden. Account information is kept until you delete your account or ask us to. Deleting a form or an account deletes its responses, uploaded files and archived copies.
Your choices
A workspace can download its own responses at any time, free. If you answered a form and want your response corrected or removed, contact the organisation that published it — they control it. To reach us about your own account, or any question about this policy, write to privacy@eventbinder.app.
Changes
If we change this policy we will update the date above and, for significant changes, tell account holders.