Privacy Policy

Who This Policy Covers

This policy applies to Sugarforms account users, workspace members, site visitors, and people who submit a published Sugarforms form. If you submit a form created by a Sugarforms customer, that form owner decides what the form asks for and how they use the responses.

Information We Collect

For account users, Sugarforms collects the information needed to create and secure an account: name, email address, password or social sign-in provider details, profile image if provided by the provider, verification status, session tokens, and related security metadata such as IP address, user agent, and timestamps.

For payments, Sugarforms sends the account email and user ID to Lemon Squeezy so checkout, subscriptions, receipts, and customer portal access can work. Sugarforms stores customer IDs, subscription IDs, plan/product details, status, cancellation state, renewal dates, and billing event timestamps. We do not store full payment card numbers.

For product use, Sugarforms stores the forms, templates, workspace names, invitations, settings, and submission-management data that account users choose to create or manage in the app.

For published forms, Sugarforms stores the answers and files that respondents submit, plus operational metadata such as source URL, origin, referrer, IP address, user agent, and submission time. The fields in each published form are controlled by the form owner.

How We Use Information

• Authenticate users, manage sessions, and protect accounts.
• Provide billing, subscription access, receipts, and support.
• Save forms, publish forms, receive submissions, and store files.
• Enforce usage limits, troubleshoot issues, and prevent abuse.
• Send account, verification, password reset, invitation, and service emails.
• Comply with legal, tax, accounting, and security obligations.

Published Forms

Form owners are responsible for telling respondents what information their forms request, why they need it, and how they will use it. Sugarforms processes form responses on behalf of the form owner to provide the hosted submissions feature.

Respondents should only submit information they are comfortable sharing with the form owner. Form owners should avoid collecting sensitive information unless they have a valid reason and the proper consent or legal basis.

Cookies And Local Storage

Sugarforms uses cookies and similar technologies for sign-in sessions, form access controls, security, and basic service operation. The playground can also store unsaved draft forms in your browser local storage; those drafts are not saved to your account unless you choose to sign in and import or save them.

Service Providers

We share information with service providers only as needed to run Sugarforms. These providers may include authentication providers such as Google and GitHub, payment processing through Lemon Squeezy, email delivery, hosting, database, storage, analytics, and security providers. They process information under their own terms and privacy commitments.

We do not sell personal information and we do not build advertising profiles from form responses.

Retention And Deletion

Account information is kept while an account remains active or as needed for security, support, accounting, and legal requirements. Form responses and uploaded files are kept until the form owner or account owner deletes them, the related form or account is removed, or retention is otherwise required by law or backup processes.

Security

Sugarforms uses reasonable technical and organizational measures to protect information, including authenticated access, provider verification, webhook signature checks, and role-based workspace access. No online service can guarantee absolute security, so account users should use strong passwords and protect access to their email, social sign-in, and billing accounts.

Your Choices

Account users can update or delete forms, submissions, files, and workspace data from the product where available. For account, billing, or privacy requests, contact us at support@sugarforms.com.

If you are a respondent to a published form, contact the form owner first for access, correction, or deletion requests about your submitted response.

Changes

We may update this policy as Sugarforms changes. When we make material changes, we will update the date at the top of this page.