Fennec Forms provides hosted tools for creating forms, surveys, quizzes, and related response workflows. This Privacy Policy explains what information Fennec Forms collects, how that information is used, and how privacy responsibilities are shared between Fennec Forms, the people and organizations that create forms in the service, and the respondents who submit information through those forms.
Who this policy applies to
This policy applies to two main groups:
- Creators and workspace members who sign up for Fennec Forms, build forms, manage a workspace, invite teammates, configure billing, or contact support.
- Respondents who fill out a form, survey, quiz, kiosk flow, embedded form, or other response experience powered by Fennec Forms.
Roles and responsibilities
Fennec Forms handles different categories of data in different ways.
Data Fennec Forms controls directly
Fennec Forms acts as the party deciding how certain data is used when it comes to:
- account registration and login
- workspace administration
- billing and subscription records
- support and contact requests
- website analytics and cookie preferences
- platform security, abuse prevention, and operational logging
Data creators collect through Fennec Forms
When a creator uses Fennec Forms to publish a form and collect responses, the creator or their organization generally decides what information is requested from respondents and why it is being collected. In those cases, Fennec Forms generally stores, transmits, and processes that response data on the creator's behalf so the service can host forms, receive submissions, display results, and provide related workflow features.
Creators are responsible for making sure their forms, notices, disclosures, and consent practices are appropriate for their own use case and legal obligations.
Information we collect
Information from creators and workspace members
We may collect:
- name, email address, login credentials, and authentication-related metadata
- workspace membership, role, invitations, and account preferences
- form configuration, builder settings, sharing settings, embed settings, and publication state
- billing plan details, subscription status, Stripe customer or subscription references, and limited invoicing metadata
- support, billing, refund, abuse, and general contact messages submitted to us
Information submitted by respondents
When a respondent fills out a form powered by Fennec Forms, we may process the information the creator chooses to collect, which can include:
- text responses, choices, ratings, quiz answers, and survey answers
- contact details or other personal information requested by the creator
- uploaded files or other attachments if the creator enables those features
- response metadata such as submission time, completion context, or channel attribution
The exact fields in a response are set by the creator, not by Fennec Forms.
Technical, security, and anti-abuse data
We may collect technical information needed to operate and secure the service, such as:
- IP address, browser type, device signals, and basic request metadata
- application logs, error logs, and performance telemetry
- CAPTCHA or anti-abuse verification data, including Cloudflare Turnstile-related signals
- session cookies and security cookies used to keep the service functioning safely
Website and marketing analytics
We use analytics tools to understand how our website and product surfaces are used.
- Umami may be used for privacy-focused aggregate traffic measurement and product usage insights.
- Google Analytics is loaded only if a visitor opts in through our cookie preferences controls.
How we use information
We use information to:
- create and secure accounts and workspaces
- host forms and related response experiences
- receive, store, display, and export submissions on behalf of creators
- support embeds, sharing links, kiosks, tracked response channels, and related product features
- process subscriptions, plan changes, and billing operations
- respond to support, billing, refund, abuse, and contact requests
- prevent spam, fraud, abuse, and unauthorized access
- improve performance, reliability, and product experience
- comply with legal obligations and enforce our Terms of Service
How respondent data is handled
Fennec Forms provides the infrastructure that lets creators collect responses. That means we may host the form experience, receive the submission, store the data, present it in dashboards, and make it available for exports or downstream workflows that the creator chooses to use.
Because creators decide what a form asks and why it asks for it, questions about the purpose of a specific form, the lawful basis for collection, or a creator's use of response data should usually be directed to the creator or organization identified on that form.
Cookies and similar technologies
We use cookies and similar storage technologies for purposes such as:
- maintaining secure sessions and core application functionality
- remembering cookie and analytics preferences
- supporting sign-in and workspace continuity
- measuring traffic and usage where permitted
Cookie and consent requirements vary by region. Your production configuration should be reviewed with counsel if you need region-specific cookie behavior or consent flows.
When we share information
We may share information with service providers that help us operate the service, such as:
- Stripe for billing and payment operations
- Cloudflare Turnstile for bot and abuse prevention
- email delivery providers for transactional messages
- analytics providers, subject to the settings described above
- infrastructure, hosting, storage, and monitoring vendors that support the platform
We may also disclose information when reasonably necessary to comply with law, respond to valid legal requests, protect the rights and safety of Fennec Forms, our users, or the public, or investigate misuse of the service.
Data retention
We retain different categories of information for different periods depending on why the information was collected, whether it is needed to provide the service, whether it is required for billing, support, audit, security, or legal reasons, and whether a creator deletes data from the product.
Form response retention may also depend on creator-controlled settings, workspace actions, or deletion requests made through the service.
Your choices and requests
Depending on your relationship with Fennec Forms and applicable law, you may be able to:
- update account information from your profile or workspace settings
- manage analytics preferences through our cookie controls
- request access to, correction of, or deletion of certain information
- contact us with questions about privacy or data handling
If your request is about a specific form response submitted to a creator, we may direct you to that creator because they usually decide what was collected and how it is used.
Children's privacy
Fennec Forms is not directed to children under 13, and we do not knowingly create accounts for children under 13. Creators are responsible for ensuring their own forms are used in compliance with applicable laws relating to minors.
Changes to this policy
We may update this Privacy Policy from time to time. When we do, we may update the published effective date and post the revised version on this page.
Contact
For privacy, deletion, or data-handling questions, use the contact page and choose the category that best matches your request.