Privacy policy

Happier Forms (“we”, “us”) runs the service at happierforms.com. For anything on this page, write to [email protected].

Two kinds of people use Happier Forms. Customers sign up, build forms and own a workspace. Respondents fill in a customer’s form. For respondent data, the customer decides what to collect and where it goes; we process it on their behalf.

• Account data: your name, email address, password (stored only as a hash), or your Google profile if you sign in with Google, plus sign-in sessions.
• Workspace data: workspace name, team members and their roles, the forms you build, their settings and themes, the prompts you write to the form builder, custom domains, API keys and the delivery setup for each form.
• Form submissions: whatever respondents enter into your forms, including uploaded files and recorded video answers, plus the time of submission and basic technical data (IP address, browser) used to stop spam and abuse.
• Billing data: your plan and billing history. Card details go straight to Stripe; we never see or store full card numbers.
• Usage data: server logs, delivery logs, and simple first-party page events on our marketing site (for example “pricing page viewed”). The marketing site sets no tracking cookies, loads no third-party analytics scripts, and sends nothing if your browser has Do Not Track turned on.

• To run the service: build and host your forms, store submissions and deliver them.
• To sign you in, keep your account secure, and stop spam and abuse.
• To bill you for paid plans.
• To send service email: sign-in codes, submission notifications, billing receipts.
• To answer you when you contact us, and to fix bugs.

We do not sell personal data. We do not use your forms or submissions for advertising. We do not use your forms, prompts or submissions to train AI models.

We use these companies (sub-processors) to run Happier Forms:

• Cloudflare: network, DNS and custom domains for published forms; the AI Gateway every AI request passes through; R2 storage for uploaded files and video answers; web search used by the form builder.
• OpenAI, reached through the Cloudflare AI Gateway: the model that turns your prompts into forms, AI steps you add to a form’s delivery, and transcription of video answers. Only the text or audio needed for that one request is sent.
• Stripe: payments and invoices for paid plans.
• Flaresend: sending service email.
• Nango (open-source software we host ourselves at nango.happierforms.com): stores the access tokens for tools you connect and makes the calls to those tools. While we finish moving to it, some older connections are still held by Composio, which we used before.
• Our server hosting provider: the machines that run the app, the PostgreSQL database and Redis.

A workspace admin can connect outside tools so forms deliver themselves: Slack, Google Sheets, Google Drive, Google Calendar, Gmail, Notion, Airtable, HubSpot, Microsoft tools and others. You choose to connect each one, through that tool’s own sign-in screen.

What we access. Only what a form you set up needs in order to deliver its submissions. For example: post a message to the Slack channel you pick, add a row to the Google Sheet you pick, create a file in Google Drive, create an event in Google Calendar, add a page to a Notion database, add a record to an Airtable base, or create or update a contact in HubSpot. To let you pick a destination, we also read lists such as your Slack channels, spreadsheets, Notion databases or HubSpot properties.

How we use it. Data from connected tools is used only to deliver your own form submissions where you told us to, and to show you that setup inside Happier Forms. We do not read your other messages, files or records beyond that. We never sell this data, never use it for advertising, and never use it to train AI models. People at Happier Forms do not look at it unless you ask us to for support, it is needed for security, or the law requires it.

How it is stored. Access tokens are stored encrypted in Nango, on our own servers. Disconnecting a tool in Happier Forms stops every form from using it straight away. To cut off access completely, also remove Happier Forms in the tool’s own settings, which revokes the token. See how to disconnect.

Happier Forms’ use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular, for data we receive from Google APIs (Sheets, Drive, Calendar, Gmail):

• We use it only to provide or improve the features you can see and use in Happier Forms: delivering your form submissions to the Google file, calendar or inbox you chose.
• We do not transfer it to others except as needed to provide those features, to comply with the law, or as part of a merger or acquisition with notice to you.
• We do not use it to serve advertisements, including retargeting or interest-based ads.
• We do not let humans read it unless you give us permission for specific data, it is needed for security purposes (such as investigating abuse), it is needed to comply with the law, or it is aggregated and anonymised for internal operations.
• We do not use it to develop, improve or train generalised AI or machine-learning models.
• We do not sell it.

We keep your account, workspace and submission data while your account is open. When you delete a form, a submission or your workspace, we delete that data from the live system, and it leaves our backups within 30 days. Billing records are kept as long as tax law requires.

You can view, export and delete your forms and submissions inside the app. To get a copy of your account data, correct it, or delete your account, write to [email protected]. We answer within 30 days. If you are a respondent to someone else’s form, contact that form’s owner first; we will help them handle your request.

Depending on where you live (for example the EU, UK or California) you may have further rights under the GDPR, UK GDPR or CCPA, including the right to complain to your local data protection authority.

Traffic is encrypted with HTTPS. Passwords are hashed. Stored credentials for connected tools are encrypted. Access to production systems is limited to the people who run the service. No system is perfectly secure; if we learn of a breach that affects your data, we will tell you without undue delay.

Happier Forms is not meant for children under 16, and we do not knowingly collect their data.

If we change this policy in a way that matters, we will update the date at the top and email workspace owners before the change takes effect.

Questions about privacy or this policy: [email protected].