Privacy
Forms carry names, addresses, dates of birth and signatures. Here is exactly where they go.
If you filled in a form
This is the common case: someone sent you a link and you answered it.
Your answers belong to whoever asked for them
The organisation that sent you the form decides what is collected, who sees it, how long it is kept and when it is deleted. We store it for them and do nothing else with it. We do not read it, sell it, or use it to build anything.
Who can see what you wrote
The account that owns the form, and anyone that account has chosen to share it with. Not us, and not somebody who merely knows the address of the form: reading the responses is checked against a signed-in account every time, on every page and every download.
One exception, and it is for your benefit. If the form emailed you a link back to your own answers, that link opens your response and no one else’s, without an account — the link is the proof. It expires, and the organisation that sent the form chooses whether to offer it at all.
One exception, and it is for your benefit. If the form emailed you a link back to your own answers, that link opens your response and no one else’s, without an account — the link is the proof. It expires, and the organisation that sent the form chooses whether to offer it at all.
How to change or remove it
Ask the organisation that sent you the form: they can delete your response on its own, without touching anyone else’s. If you cannot reach them, write to us and we will put you in touch. Some forms also email you a link back to your own answers so you can correct them yourself — if yours did, that link is the way in.
What we never do
No advertising. No selling or sharing your answers with anyone. No tracking you across other websites. Nothing you write is used to train anything.
If you collect responses here
You decide what happens to the data you gather, and you are responsible for it. What we do underneath:
What leaves our servers
When an uploaded PDF has no form fields of its own, the blank document is read once, by a third party, to work out what the questions are. Responses are never sent anywhere. Notification emails name the form, never the answers.
Where it is kept, and for how long
On servers in the United States, encrypted in transit and at rest. You set the retention: a form can delete its responses automatically after a chosen period, or keep them until someone removes them. Deleting a form removes every response and the uploaded document with it, and nothing deleted can be recovered. The security page has the operational detail — hosting, encryption, backups, access and what we do not have yet.
Who we are
PDF to Web Form operates this service. Responses are processed on behalf of the organisations that collect them — whoever sent you a form decides what happens to your answers, and we act on their instructions. Post reaches us at 2701 Del Paso Rd, Ste 130 #379, Sacramento, CA 95835.
Questions about any of this? Ask. Assessing this for an organisation? Security is written for you.