SnapForm

Privacy Policy

EFFECTIVE DATE: SEPTEMBER 10, 2026

At SnapForm (“SnapForm”), we take your privacy seriously. Please read this Privacy Policy to learn how we treat your personal data and your form submissions. By using or accessing our Services in any manner, you acknowledge that you accept the practices and policies outlined below, and you hereby consent that we will collect, use and share your information as described in this Privacy Policy.

Remember that your use of SnapForm's Services is at all times subject to our Terms of Service. Any terms we use in this Policy without defining them have the definitions given to them in the Terms of Service.

If you have questions about accessibility or need to access this Privacy Policy in an alternative format, please contact anuragpal9002@gmail.com.

1. What this Privacy Policy Covers

This Privacy Policy covers how we treat Personal Data that we gather when you access or use our Services. “Personal Data” means any information that identifies or relates to a particular individual and also includes information referred to as “personally identifiable information” or “personal information” under applicable data privacy laws.

This policy does not apply to the practices of companies that we do not own or control, or to individuals whom we do not employ or manage.

2. Personal Data We Collect

We collect Personal Data about you from:

  • You directly: When you create an account, log in via one-time passcode (OTP), configure forms, or request support (e.g. email address, account settings).
  • Your form respondents: When visitors submit responses to forms hosted on your SnapForm endpoints (/api/form/:id), we store and process these payloads on your behalf in encrypted storage.
  • Automated logs & telemetry: Technical information including IP address (hashed for sliding-window rate limiting), browser user agent, submission timestamps, and referrer headers for spam filtering.

3. How We Use Personal Data

We process Personal Data to operate, maintain, and enhance the Services:

  • Compiling and serving custom React form components, Zod validation schemas, and Next.js route handlers.
  • Delivering instant email notifications to your verified email address when new responses arrive.
  • Executing automated security safeguards, including real-time DNS MX checks, disposable email detection, and anti-abuse filtering.
  • Preventing DDoS attacks, brute-force spamming, and platform misuse.

4. How We Share Your Personal Data

We do not sell, rent, or trade your or your respondents' personal information to third parties. We share Personal Data only with trusted service providers strictly necessary to operate our infrastructure:

  • Cloud hosting, serverless compute, and encrypted database infrastructure.
  • Transactional email delivery services (e.g. Nodemailer / SMTP) for authentication passcodes and submission alerts.
  • Legal authorities when required by subpoena, court order, or applicable law.

5. Tracking Tools and Cookies

SnapForm uses strictly necessary functional cookies and HTTP-only session tokens to maintain authenticated sessions securely. We do not use third-party behavioral advertising trackers, cross-site pixels, or marketing trackers.

6. Data Security and Retention

We employ industry-standard technical and organizational measures to safeguard your information:

  • Encryption: All data in transit is protected using TLS 1.3. Form responses and credentials are encrypted at rest using AES-256-GCM.
  • Session Isolation: Authentication tokens are stored in secure, encrypted HTTP-only SameSite cookies, inaccessible to client-side scripts.
  • Retention: Form submissions are retained as long as your form remains active, or until you permanently delete responses or your account from your dashboard.

7. Your Privacy Rights & Choices

Depending on your jurisdiction (including the EU/EEA under GDPR and California under CCPA/CPRA), you have rights regarding your personal data:

  • Access & Export: You can export all form schemas and responses in standard formats (ZIP / CSV / JSON) at any time.
  • Correction & Deletion: You can edit or permanently delete forms, submissions, and your account directly in the dashboard or by contacting us.

8. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services or legal requirements. We will alert you to material changes by updating the “Effective Date” at the top of this page or via email notice where appropriate.

9. Contact Information

If you have any questions or comments about this Privacy Policy or our privacy practices, please contact us: