Snapshot 22107
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Subprocessors We use other companies for parts of the service that are not our own expertise. Each one only gets the data it needs to do its job, and may only use it to do that job for us. The first table is used for every customer, and says which of those you can switch off. The second is used only when you switch on the feature named beside it. Effective date: 22 August 2026 Used for every customer Vendor Optional Purpose Data sent Retention Where Safeguard Amazon Web Services No Cloud hosting, database, file storage and email delivery Account, Submission content, Submitter IP address, Notification recipients, Server logs Held for us, under our own retention windows Ireland Stays in the EEA Hetzner No Hosts the service that turns an IP address into an approximate location Submitter IP address Held for us, under our own retention windows Germany Stays in the EEA OOPSpam Yes, per form Scores submissions for spam Submission content, Submitter email address, Submitter IP address Not stored; scored and discarded United States None published Paddle No Payment processing and merchant of record Billing, Checkout script requests Transaction records for 5 years United Kingdom Adequacy decision Sentry No Error reporting Error reports Error reports for up to 90 days United States EU-US Data Privacy Framework Mapbox No Draws the map on the form analytics screen Map tile requests IP addresses for 30 days United States Standard Contractual Clauses Used only when you switch on a feature None of these receive anything until you turn on the feature named beside it. Turning it off again stops the flow. Vendor Turned on by Purpose Data sent Retention Where Safeguard Cloudflare (Turnstile) Turnstile spam protection Spam protection Submitter IP address Not published United States Standard Contractual Clauses GitHub GitHub sign-in Signs a customer in without a password Sign-in IP address Not published United States EU-US Data Privacy Framework Google (reCAPTCHA) reCAPTCHA spam protection Spam protection Submitter IP address Not published Ireland Stays in the EEA Google (Sheets) Google Sheets connection Copies submissions into a Google Sheet the customer connects Submission content Kept in your Google account until you delete it Ireland Stays in the EEA Google (Sign-in) Google sign-in Signs a customer in without a password Sign-in IP address Not published Ireland Stays in the EEA hCaptcha hCaptcha spam protection Spam protection Submitter IP address No long-term retention United States EU-US Data Privacy Framework Notion Notion connection Copies submissions into a Notion database the customer connects Submission content Kept in your Notion workspace until you delete it United States Standard Contractual Clauses Slack (Connection) Slack connection Posts submissions to a Slack channel the customer connects Submission content Kept in your Slack workspace, under your retention settings Ireland Stays in the EEA Slack (Sign-in) Slack sign-in Signs a customer in without a password Sign-in IP address Not published Ireland Stays in the EEA Zapier Zapier connection Lets the customer's Zap read their submissions Submission content Up to 69 days in your Zapier account, 4 months in backups United States Standard Contractual Clauses Signing in with GitHub, Google or Slack Those three are in the table above because choosing one of them sends your browser to them, and we would rather show you that than leave it out. They are a different kind of company from the rest of the list though. They decide the use of that data themselves rather than acting for us, which makes them controllers in their own right rather than our subprocessors, and their own privacy policies cover it. Companies that are not on this list Some parts of the service are built and run by us rather than bought in. Those run on the infrastructure already listed above, so they add no company to this page. When this list changes We add a vendor here at least 30 days before it starts handling personal data. That gives you time to object. If you object, write to us. If we cannot resolve it, you may stop using the service and we will refund what you have not used. Email [email protected] and we will add you to the list of people we tell about changes. Our Data Processing Agreement makes this page part of the contract. Questions Have a question about this page, your data, or your rights? Email us at [email protected] and we will answer it. Formspark is operated by Trampoline Software SRL, Rue de Marsannay-la-Côte 16, 5032 Mazy, Belgium. Enterprise number BE 0799.398.081. Start collecting submissions today Keep full control over the look and feel of your forms. Let Formspark take care of the rest. Try it free No credit card required