Privacy policy

Information we process

Account details include your name, email address, workspace name, verification status and a password hash if you use email sign-in. Google sign-in provides an account identifier, name and verified email; Google access and refresh tokens are not retained.

We record the dates you use your verified account and its last active time to measure product adoption. These activity records contain no IP addresses, browser fingerprints or message contents. For your forms, we store website settings, submitted fields, submission dates, spam status and email delivery status. Billing records include payment references, subscription status and provider identifiers. Payment details are entered with Paystack; Pentreeform does not store your full card details.

Why we use it

We use this information to operate your account, save and display submissions, send requested notifications, process subscriptions, and prevent abuse. We process account and billing information to provide the service, and security information to protect it. Website owners are responsible for the purpose and lawful basis of the information their forms collect.

Services that receive information

Cloudflare hosts the application and database and provides Turnstile security checks. Resend receives the recipient address and notification content to send email. Paystack processes payments. Google processes sign-in when you choose it. Google Fonts serves the website’s fonts and receives normal browser requests. Providers may process information outside your country under their own terms and safeguards.

Form content is visible to the account that owns the form and is included in notifications to its verified email address. We do not sell your submission data.

Cookies and security

A necessary session cookie keeps you signed in for up to seven days. Browser storage retains your interface theme preference. Your workspace requires sign-in; submissions are stored in your account. Cloudflare Turnstile may process browser and network signals to check for abuse. We hash IP-based rate-limit keys rather than storing raw IP addresses in those keys; hosting and security providers may process IP addresses in their own systems.

How long information stays

Messages waiting for verification are encrypted and expire after ten minutes. Scheduled cleanup removes expired messages. Their temporary contents are erased as soon as verification saves the submission to your inbox.

Submission history is retained for 30 days on Free, 183 days on Starter, and 366 days on Pro and Agency, then removed by scheduled cleanup. When paid access expires, the Free retention period applies, so export anything you need before downgrading. Deleting a submission from Pentreeform does not delete notification copies already delivered to an email inbox.

Daily account activity records are retained for 120 days; the last active time stays with your account. Aggregate submission counters can remain after individual messages expire. Account, security and billing records can remain for account administration, fraud prevention and applicable recordkeeping requirements. Submission retention periods do not describe the independent retention policies of email or payment providers.

Your choices and requests

You can update account details, export retained submissions and delete individual messages in your workspace. For access, correction, deletion or other privacy requests, use Support to request private follow-up. Depending on applicable law, you may also have rights to object, restrict processing, withdraw consent or complain to your data protection authority.

If you submitted a form on another website, contact that website’s owner first. They decide what their form collects and how the submission is used.

Policy changes

We will update this page when the service’s data practices change. The date above identifies this version.