Privacy

Placeholder: this page is a working outline for Frogfish LLC to replace with its own privacy notice before launch.

Two kinds of people

Our customers build forms. For them we keep an email address and password (through Frogfish's sign-in service), the workspaces they belong to, and their billing details with Stripe. Respondents fill forms in. For a form's owner we keep exactly what the respondent sends, any files they attach, the time, and the form's own campaign tags from its link. The form's owner decides what's asked and why; for respondents' answers, Nurvequest processes data on the owner's behalf.

What we don't do

• We don't put respondents in a session or track them across sites. A form counts its views without cookies.
• We don't send answers to analytics or advertising services, and don't use them to train anything.
• We don't keep keystrokes or unfinished answers: nothing is stored until a respondent presses send.

Where it's kept

Answers are kept in an encrypted store on Frogfish's servers, and uploaded files in private object storage that is only reached through a signed, short-lived link. Email notifications go through Frogfish's own mail service.

Respondents' rights

To get a copy of what you sent a form, or to have it deleted, contact the organisation that runs the form: they can export or erase your answers from their workspace. Workspaces can also set how long answers are kept.

Contact

Frogfish LLC. [Address and data-protection contact to be added.]