Subprocessors
We use other companies for parts of the service that are not our own expertise. Each one only gets the data it needs to do its job, and may only use it to do that job for us.
The first table is used for every customer, and says which of those you can switch off. The second is used only when you switch on the feature named beside it.
Effective date: 22 August 2026
Used for every customer
| Vendor | Optional | Purpose | Data sent | Retention | Where | Safeguard |
|---|---|---|---|---|---|---|
| Amazon Web Services | No | Cloud hosting, database, file storage and email delivery | Account, Submission content, Submitter IP address, Notification recipients, Server logs | Held for us, under our own retention windows | Ireland | Stays in the EEA |
| Hetzner | No | Hosts the service that turns an IP address into an approximate location | Submitter IP address | Held for us, under our own retention windows | Germany | Stays in the EEA |
| OOPSpam | Yes, per form | Scores submissions for spam | Submission content, Submitter email address, Submitter IP address | Not stored; scored and discarded | United States | None published |
| Paddle | No | Payment processing and merchant of record | Billing, Checkout script requests | Transaction records for 5 years | United Kingdom | Adequacy decision |
| Sentry | No | Error reporting | Error reports | Error reports for up to 90 days | United States | EU-US Data Privacy Framework |
| Mapbox | No | Draws the map on the form analytics screen | Map tile requests | IP addresses for 30 days | United States | Standard Contractual Clauses |
Used only when you switch on a feature
None of these receive anything until you turn on the feature named beside it. Turning it off again stops the flow.
| Vendor | Turned on by | Purpose | Data sent | Retention | Where | Safeguard |
|---|---|---|---|---|---|---|
| Cloudflare (Turnstile) | Turnstile spam protection | Spam protection | Submitter IP address | Not published | United States | Standard Contractual Clauses |
| GitHub | GitHub sign-in | Signs a customer in without a password | Sign-in IP address | Not published | United States | EU-US Data Privacy Framework |
| Google (reCAPTCHA) | reCAPTCHA spam protection | Spam protection | Submitter IP address | Not published | Ireland | Stays in the EEA |
| Google (Sheets) | Google Sheets connection | Copies submissions into a Google Sheet the customer connects | Submission content | Kept in your Google account until you delete it | Ireland | Stays in the EEA |
| Google (Sign-in) | Google sign-in | Signs a customer in without a password | Sign-in IP address | Not published | Ireland | Stays in the EEA |
| hCaptcha | hCaptcha spam protection | Spam protection | Submitter IP address | No long-term retention | United States | EU-US Data Privacy Framework |
| Notion | Notion connection | Copies submissions into a Notion database the customer connects | Submission content | Kept in your Notion workspace until you delete it | United States | Standard Contractual Clauses |
| Slack (Connection) | Slack connection | Posts submissions to a Slack channel the customer connects | Submission content | Kept in your Slack workspace, under your retention settings | Ireland | Stays in the EEA |
| Slack (Sign-in) | Slack sign-in | Signs a customer in without a password | Sign-in IP address | Not published | Ireland | Stays in the EEA |
| Zapier | Zapier connection | Lets the customer's Zap read their submissions | Submission content | Up to 69 days in your Zapier account, 4 months in backups | United States | Standard Contractual Clauses |
Signing in with GitHub, Google or Slack
Those three are in the table above because choosing one of them sends your browser to them, and we would rather show you that than leave it out. They are a different kind of company from the rest of the list though. They decide the use of that data themselves rather than acting for us, which makes them controllers in their own right rather than our subprocessors, and their own privacy policies cover it.
Companies that are not on this list
Some parts of the service are built and run by us rather than bought in. Those run on the infrastructure already listed above, so they add no company to this page.
When this list changes
We add a vendor here at least 30 days before it starts handling personal data. That gives you time to object.
If you object, write to us. If we cannot resolve it, you may stop using the service and we will refund what you have not used.
Email support@formspark.io and we will add you to the list of people we tell about changes. Our Data Processing Agreement makes this page part of the contract.
Questions
Have a question about this page, your data, or your rights? Email us at support@formspark.io and we will answer it.
Formspark is operated by Trampoline Software SRL, Rue de Marsannay-la-Côte 16, 5032 Mazy, Belgium. Enterprise number BE 0799.398.081.
Formspark is a reliable backend for your forms.
Keep full control over the look and feel of your forms.
Let Formspark take care of the rest.