formto is a form backend. Websites and AI agents send form responses to formto, and formto stores them, sorts them and notifies the account that owns the form. This page explains what we collect, why, and who helps us run the service.
What we collect
- Your account: your name, email address and password (stored only as a hash), or your Google account email if you sign in with Google.
- Form responses: whatever the people filling in your forms send, plus the time, the sending page and IP address, which we use for spam and abuse protection.
- Files: attachments uploaded with a response.
- Usage events: first-party counts such as sign-ups and first responses, used to improve formto. We do not use third-party analytics or advertising scripts.
How we use it
We use your data to run formto: to store responses, triage them with AI (intent, summary and spam score), send the notification emails you set up, deliver responses to the destinations you connect, and keep the service secure. We do not sell personal data.
How long we keep it
Responses and their files are deleted automatically when your plan's retention period ends: 30 days on Free, 365 days on Pro and 730 days on Business.
Sub-processors
These companies process data on our behalf to provide formto:
| Company | What for |
|---|---|
| Cloudflare | Hosting, storage of responses and files, AI triage (Workers AI) and notification email |
| Stripe | Payments and billing for paid plans |
Your choices
You can export your responses as CSV from the dashboard at any time. To ask about your data or have it deleted, contact us at the address listed on formto.io.