Privacy in the public beta

Templates and published respondent forms can be viewed publicly. Your editor, workflow settings, and response inbox require sign-in and are restricted to the form owner. Form definitions and responses are stored in a private SQLite database on our server. AI drafting sends your prompt and, when editing, your current questions to Anthropic; OpenRouter free-model providers may be used if the primary provider is unavailable. Do not include real answers or sensitive personal information in prompts. A draft made before sign-in is stored in this browser and can be resumed for 24 hours; signing in and saving it transfers it to your private workspace. Email notifications use Resend when configured. Webhook actions send responses to the destinations configured by the form owner. For questions about a form or its response handling, contact the organization that shared it. This beta does not yet offer automated retention or account deletion controls; avoid collecting sensitive production information.