Forms2sheetDocs

Privacy Policy

Last updated: July 12, 2026

This Privacy Policy explains how Forms2sheet collects, uses, and shares information when you use our Service.

1. Information we collect

  • Account data: name, email, and profile image from Google Sign-In.
  • Google tokens: OAuth refresh tokens (encrypted at rest) so we can write to sheets you select.
  • Form configuration: sheet IDs, domain allowlists, CAPTCHA settings, webhook settings.
  • Submission metadata: timestamps, status, field names, and origin information. Payload values are forwarded to your Sheet and may be briefly processed in memory/queues.
  • Opt-in request data in your Sheet: If your form HTML includes magic tokens such as {{ip}}, {{user_agent}}, or {{country}}, we resolve those from the submit request and write the values into your Google Sheet as part of the payload you configured. We do not store those values in our database beyond normal submission metadata and transient queue processing.
  • Usage data: rate-limit counters, daily usage totals, and analytics events for graphs.

2. How we use data

We use data to provide the Service, authenticate you, write rows to Google Sheets, enforce fair use, deliver webhooks, show dashboards, and improve reliability and security.

3. Subprocessors

  • Google (OAuth, Sheets API)
  • Cloudflare (hosting, queues, Analytics Engine)
  • Turso (database)
  • Svix (webhook delivery)
  • Crisp (customer chat on public pages)

4. Retention

Account and configuration data are retained while your account is active. Submission metadata may be retained for abuse prevention and analytics. You can delete forms from the dashboard; revoke Google access to stop future writes.

5. Security

We encrypt sensitive secrets at rest, transmit data over HTTPS, and restrict dashboard access to authenticated sessions. No method of transmission or storage is 100% secure.

6. Your rights

Depending on your location, you may request access, correction, or deletion of personal data. Contact us via Crisp chat. End users who submit to your forms should contact you as the form operator.

7. Children

The Service is not directed to children under 16. We do not knowingly collect personal information from children.

8. Changes

We may update this Policy. Material changes will be posted on this page with an updated date.