Privacy Policy
We do not sell your personal data. We never have, and we do not plan to. We make money from customers who pay us.
This page covers two different things. It covers the data we hold about you as a Formspark customer. It also covers the data our customers collect through their forms, which we handle on their behalf.
It tells you what we collect, why we collect it, who else sees it, how long we keep it, and what you can ask us to do about it.
Effective date: 22 August 2026
Who we are
Formspark is a form backend. It is run by Trampoline Software SRL, a company registered in Belgium under enterprise number BE 0799.398.081.
Our address is Rue de Marsannay-la-Côte 16, 5032 Mazy, Belgium. Write to us at support@formspark.io.
We have not appointed a data protection officer. We are not required to have one, and we would rather say so than leave you guessing.
Data we hold about you
This is the data we decide the use of. In legal terms, we are the controller of it.
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Account email address | Create your account, sign you in, and contact you about the service | Our contract with you | Life of the account. The email address is kept after deletion to stop the free allowance being re-granted |
| Sign-up and sign-in IP address IP address, sign-up method | Keep the service secure | Our legitimate interests: Keeping the service secure and available to the people entitled to use it | 12 months |
| Sign-in identity from a social provider email address returned by GitHub, Google or Slack | Let you sign in without a password | Our contract with you | As for Account |
| Newsletter subscription email address, subscription timestamp | Send you product news | Your consent | Until you unsubscribe |
| Billing billing address, transaction record, card last four digits | Take payment, calculate tax, and issue invoices | Our contract with you | Held by Paddle under its own terms |
| Autoresponder suppression list email address, reason | Make sure someone who unsubscribed never receives another autoresponse | A legal duty | Kept indefinitely, so that an unsubscribe cannot be undone by an account being deleted |
| Autoresponder complaint records recipient email address, spam verdict | Keep the records needed to answer complaints about autoresponder email | Our legitimate interests: Keeping autoresponder email deliverable and answering complaints about it | 12 months |
| Server logs request metadata, identifiers, error detail | Keep the service running and diagnose failures | Our legitimate interests: Operating and debugging the service | 7 days |
| Email delivery events recipient email address, bounce and complaint events | Keep email deliverable and stop sending to addresses that reject it | Our legitimate interests: Protecting the sending reputation that every customer's notifications depend on | 24 months |
| Map tile requests IP address of the signed-in user, the map area being viewed | Load the map behind the submission heatmap in the dashboard | Our legitimate interests: Showing a form's owner where their submissions came from | Held by Mapbox under its own terms |
| Checkout script requests IP address of the signed-in user | Load the checkout our payment processor runs | Our contract with you | Held by Paddle under its own terms |
| Error reports error detail, operation name, identifiers | Find and fix failures | Our legitimate interests: Diagnosing failures before they reach more customers | Held by Sentry under its own terms |
Data we handle for our customers
When someone fills in a form built on Formspark, we store and forward what they typed. The customer who owns that form decides what to ask for and what to do with the answers. In legal terms, they are the controller and we are the processor.
If you filled in a form and want your data removed, ask the site that showed you the form. We will pass your request on to them if you reach us first.
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Submission content every field a form's visitor fills in | Deliver submissions to the customer who owns the form | Our contract with you | Until the customer deletes it. Deleted submissions stay recoverable for 30 days |
| Submitter IP address IP address | Filter spam, keep the service secure, and show the customer where submissions came from | Our legitimate interests: Keeping form endpoints usable, which is part of what the customer is paying for | 12 months |
| Approximate location derived from an IP address continent, country, region, city, latitude, longitude | Draw the submission map and country breakdown the customer sees | Our legitimate interests: Giving the form's owner a view of where their submissions come from | 12 months |
| Request metadata browser user agent, referring page, origin | Filter spam and help the customer see where a submission came from | Our legitimate interests: Distinguishing genuine submissions from automated ones | With the submission it belongs to |
| Filtered submissions submission content, IP address, user agent, referring page, origin | Hold submissions that were not delivered to the customer's inbox, and keep the records needed to answer complaints about the service | Our legitimate interests: Keeping the service usable, and answering complaints about how it has been used | 12 months. Filtered submissions are visible to the customer for 30 days |
| Notification recipients email address | Send form notifications to the addresses a customer chooses | Our contract with you | Until the customer removes the address, or until the account that owns it is deleted |
| Export files the submission content covered by the export | Give the customer their submissions as CSV or JSON | Our contract with you | 7 days |
Our Data Processing Agreement sets out how we handle this data. It applies to every customer, at no extra cost.
What we do not collect
- Special category data under GDPR Art. 9
- Children's personal data
- Personal health information
- Personal criminal history
- Payment card numbers
- Biometric data
Our Terms of Service forbid using Formspark to collect any of these. If we find a form doing it, we act on that form.
Where we store your data
We run Formspark from Belgium. Your data is stored in Ireland and Germany.
Both are in the European Economic Area, so your data does not leave it when we store it. Some of the vendors listed below are outside it.
Who we share it with
We share data with the vendors that help us run the service. They may only use it to do that job for us. They may not use it for anything of their own.
Our subprocessors page lists every one of them, what it does, where it is, and the transfer safeguard that applies to it. Some are used for every customer. Others are used only when a customer switches on a feature that needs them.
If you sign in with GitHub, Google or Slack, that provider learns you use Formspark and tells us your email address. Those companies decide the use of that data themselves, so their own privacy policies apply to it.
We may also share data when the law requires it, or to protect the service and the people who use it.
How long we keep it
The tables above give the window for each kind of data. A few of them are worth calling out.
- Submissions are kept until the customer who owns the form deletes them. Deleted submissions stay recoverable for 30 days.
- Export files are deleted after 7 days, and the link to them stops working at the same moment.
- Server logs are kept for 7 days. Email delivery records are kept for 24 months.
- If you delete your account, we remove your workspaces and their submissions straight away. We keep your email address so that deleting and re-registering cannot hand out a second free allowance.
We should be straight with you about one thing. The windows for sign-up and sign-in ip address, submitter ip address, approximate location derived from an ip address, filtered submissions, autoresponder complaint records are our policy, and we apply them by hand today. We have not yet built the scheduled job that would apply them on its own. We are working on it.
Cookies and other storage
We run no analytics, no advertising tags and no tracking pixels. Our marketing website stores nothing on your device at all.
The dashboard stores what it needs to keep you signed in, plus the settings you chose yourself. None of it follows you around the web, which is why you see no cookie banner here.
Starting a purchase is the one exception. The checkout is run by our payment processor, and its script notes the site you came to us from so that the sale can be credited to it. That note is held for the tab you are in and goes when you close it.
You can clear all of it from your browser settings. Clearing it signs you out.
How we protect your data
- Encryption in transit
- Access to production data limited to a small number of authorized people
- Sensitive values removed from error reports before they leave the service
- Monitoring and alerting on the production service
No service can promise perfect security, and we will not pretend otherwise. If something goes wrong, the next section says what we do.
If there is a data breach
We tell the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données) within 72 hours of finding out, unless the breach is unlikely to put anyone at risk.
If the breach is likely to put you at serious risk, we tell you too. We do that as soon as we can, by email and by a notice in the dashboard. We tell you what happened, what data was involved, and what you can do.
When the breach involves data we handle for a customer, we tell that customer without undue delay. It is then their call whether to tell the people affected.
Your rights
You can ask us to:
- Show you the data we hold about you
- Correct it if it is wrong
- Delete it
- Send it to you in a file you can reuse
- Stop or limit what we do with it
- Stop sending you email
Email support@formspark.io and we will reply within one month. Exercising any of these rights costs nothing and will never get your account treated worse.
Two of these you can already do yourself. You can delete your account from the dashboard, which removes your workspaces and their submissions. You can export a form's submissions as CSV or JSON at any time.
Changing the email address on an account still goes through us. There is no button for it yet, so write to us and we will move it.
If you think we have got something wrong, tell us first. You also have the right to complain to the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données).
If you are in the EU or the UK
The GDPR gives you the rights listed above. Our GDPR page explains where we are the controller, where we are the processor, and how to exercise each right.
If you are in California
The CCPA gives you rights over your personal information, and we honour them. We do not sell or share it. Our California privacy page has the detail, including the statutory categories and how to make a request.
Children
Formspark is not for children. We do not market it to anyone under 16, and our customers may not use it to collect data from children.
If you are a parent and think your child has given us data, write to us. We will remove it.
Changes to this policy
We update this page when the service changes or the law does. The effective date at the top tells you which version you are reading.
When a change matters to you, we will tell you by email or by a notice in the dashboard before it takes effect.
Questions
Have a question about this page, your data, or your rights? Email us at support@formspark.io and we will answer it.
Formspark is operated by Trampoline Software SRL, Rue de Marsannay-la-Côte 16, 5032 Mazy, Belgium. Enterprise number BE 0799.398.081.
Formspark is a reliable backend for your forms.
Keep full control over the look and feel of your forms.
Let Formspark take care of the rest.