Privacy Policy
How we protect your privacy, what data we collect, and your rights over your information. Your data always belongs to you, not us.
Last updated February 2, 2026Table of Contents
This privacy policy describes how Tyform ("we", "us", or "our") collects, uses, and protects your personal information when you use our website at tyform.com and our form builder service. This policy applies to all users, including website visitors, registered users, and users who connect third-party services.
At Tyform, we are committed to complying with GDPR, CCPA, PECR, and other privacy regulations. The privacy of your data—and it is your data, not ours—is extremely important to us. We promise we never sell your data. Never have, never will.
Data Controller
The data controller is Tyform. We can be contacted by email at support@tyform.com.
Data Collection & Usage
As a Visitor to tyform.com
We collect anonymous usage data for statistical purposes, including referrer, browser, operating system, device type, and pages visited. No personal information is collected from visitors. No cookies are used for analytics.
As a Registered User
When you sign up for Tyform, we collect:
- Email address: Used for account authentication, important service updates, and support communications
- Password: Securely hashed and stored for account authentication
- Profile information: Optional name and avatar for personalization
Payment Information
If you upgrade to a paid plan, payment is processed through Stripe or Dodo Payments. We never see or store your full credit card number. Our payment processors handle all payment data securely according to PCI-DSS standards.
Google User Data
When you connect your Google account to Tyform (for features like Google Sheets integration), we access specific Google user data. This section clearly describes what data we access and how we use it in compliance with the Google API Services User Data Policy.
Data Accessed from Google
When you authorize Tyform to connect with Google services, we may access the following data:
- Google Account Email & Profile: Your email address and basic profile information (name, profile picture) for authentication and displaying your connected account
- Google Sheets Data: When you enable Google Sheets integration, we access specific spreadsheets you authorize to send form responses to your selected sheets
- Spreadsheet Metadata: Names and IDs of spreadsheets and worksheets you grant access to, so you can select where to send form data
How We Use Google User Data
We use the Google user data we access strictly for the following purposes:
- Google Sheets Integration: To automatically send form submission data to your selected Google Sheets spreadsheet when someone submits a form
- Account Display: To show which Google account is connected in your Tyform dashboard
- Spreadsheet Selection: To display a list of your spreadsheets so you can choose where form responses are saved
Data Storage & Retention
- We store OAuth access tokens securely and encrypted to maintain your Google connection
- We do not store copies of your Google Sheets content—we only write form responses to your sheets
- When you disconnect your Google account or delete your Tyform account, all stored tokens are immediately deleted
Data Sharing
We do not share, sell, or transfer your Google user data to any third parties, except as necessary to provide the integration service (i.e., sending data to your own Google Sheets). Your Google data is never used for advertising, marketing, or any purpose other than providing the specific integration features you've enabled.
Revoking Access
You can disconnect your Google account from Tyform at any time through your account settings. You can also revoke Tyform's access directly from your Google Account permissions page. Upon revocation, we immediately delete all stored access tokens.
Limited Use Disclosure
Tyform's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Third-Party Integrations
Tyform integrates with various third-party services to provide additional functionality. When you connect a third-party service, we may access and store authentication tokens to maintain the connection. Here's what data we access for each integration:
| Integration | Data Accessed | Purpose |
|---|---|---|
| Google Sheets | Email, spreadsheet names, write access to selected sheets | Send form responses to your spreadsheets |
| Notion | Workspace name, database names, write access to selected databases | Send form responses to your Notion databases |
| Slack | Workspace name, channel list | Send form submission notifications to your channels |
| Discord | Server name, webhook URL | Send form submission notifications to your servers |
Form Responses
When someone fills out a form you've created, we store that response data on your behalf. You are the data controller for this data, and we are the data processor. We only use this data to provide you with our service.
You can export or delete your form responses at any time. When you delete a form or your account, all associated response data is permanently deleted from our servers within 30 days.
Data Security
We take data security seriously. Here are the measures we implement:
- Encryption in Transit: All data is encrypted using TLS 1.3
- Encryption at Rest: Data is encrypted using AES-256
- Secure Infrastructure: We use SOC 2 compliant cloud infrastructure
- Token Security: OAuth tokens and API keys are encrypted and stored securely
- Regular Audits: We regularly audit our security practices
Your Rights
You have the right to:
- Access: Request a copy of your personal data
- Correct: Update or correct inaccurate information
- Delete: Request deletion of your account and all associated data
- Export: Download your data in a portable format
- Revoke: Disconnect third-party integrations at any time
You can exercise most of these rights directly from your account settings. For additional assistance, contact us at support@tyform.com.
Changes to This Policy
We may update this policy from time to time. We'll notify you of any significant changes by email. The latest version will always be available on this page with the updated date at the top.
Contact Us
If you have any questions about this privacy policy, our data practices, or how we handle your information, please contact us:
- Email: support@tyform.com
- Website: tyform.com/contact