Privacy

Who we are

Ellieforms receives messages sent through website forms on behalf of the website owner (our customer). For those messages the website owner is the controller and Ellieforms is the processor.

What we store

For our customers: your email address, name (from Google, if you use it), your plan, and your settings.

For your visitors: the fields your form sends, the website it came from, and the time. We use the visitor's IP address and browser details only to check for spam and abuse; we do not keep them with the message.

Who we share it with

Cloudflare (hosting, database, email delivery), our spam-filter provider (message text is checked for spam), Google (only if you sign in with Google), and Polar (payments, if you upgrade). We never sell data and never send marketing to your visitors.

How long

Messages are kept for one year, then deleted automatically. Messages from a website you never confirmed are deleted after 30 days. You can delete any message, or your whole account, at any time.

Visitor requests

If a visitor asks you to delete their data, search for their email in your inbox and delete the messages. If they contact us, we forward the request to you.

Your rights

You can export all your messages (CSV), correct your details, and delete your account from the account page. Contact privacy@ellieforms.com for anything else.

Cookies

We use one sign-in cookie on ellieforms.com, and a referral cookie if you arrive from a referral link. Our script on your website sets no cookies.