Privacy policy

Docoform handles two kinds of information, and it matters which is which.

• Your account. The details you give us when you sign up and pay. We decide what happens to these, so we are the controller of them.
• What people put in your forms. You choose the form, the questions and who gets the link. You are the controller of those answers; we store and process them on your instructions.

So if someone who filled in one of your forms wants their answers removed, they should ask you. If you ask us, we will do it.

• Your name and email address.
• A password, held only as a hash by our authentication provider. We never see the password itself.
• The PDFs you upload and the forms you publish from them.
• Your plan, and the subscription record Paddle sends us: its status, the billing period and the amount. We never see or store your card details — those go straight to Paddle.
• Support tickets you send us, and our replies.
• Ordinary server logs, which include IP addresses, for keeping the service running and secure.

• The values entered in the form's fields.
• The signature image, when the form has a signature field.
• Any images or logos uploaded into the form.
• The finished PDF, and the date and time it was submitted.

What that amounts to is entirely up to the form you published — it could be a name and a date, or it could be something far more sensitive. It is stored so you can see it in your dashboard and download the filled PDF.

• To perform our contract with you — running your account, storing your forms, delivering submissions.
• Because we have to — Paddle and we must keep records of sales for tax.
• Legitimate interests — keeping the service secure, preventing abuse, and answering support requests.

For the answers people submit through your forms, the lawful basis is one you choose as the controller, not us.

Docoform sets cookies to keep you signed in and to keep the login process secure. That is all they do. There is no advertising, no analytics that follows you between sites, and no third-party tracking. Filling in a public form does not require a cookie at all.

Only the companies that make the service work. Each is bound to handle the information only as we instruct.

We do not sell personal information, we do not share it for advertising, and we do not use it to train machine-learning models. We would only hand it to anyone else if the law required it.

DocoForm is run from Pakistan, and the providers listed above run servers in several other countries. Your information is therefore processed outside the country you live in, which for customers in the UK or EEA means outside those too. Where that happens, the transfer relies on the standard contractual clauses those providers have in place.

• Your account and its contents: until you delete them, or the account is closed.
• Deleted forms: they go to the Archive, and are removed permanently 30 days later.
• A closed account: everything — forms, submissions, stored PDFs, signature and uploaded images — is deleted at the point you close it.
• Records of sales: kept as long as tax law requires, which is normally six years.

Depending on where you live, you can ask for a copy of what we hold about you, ask us to correct it, ask us to delete it, object to how we use it, or ask for it in a portable form.

The quickest route to deletion is to close your account on the account page, which removes everything at once. For anything else, email support@docoform.com and we will answer within 30 days.

If you are in the UK or EEA and think we have handled your information badly, you can also complain to your data protection authority.

Uploaded PDFs and submitted files are held in private storage that is not readable from a public address, and the database enforces at row level that one account cannot read another's. Traffic to the site is encrypted.

No service is perfectly secure. If a breach ever affects your information, we will tell you and the relevant authority as the law requires.

Docoform is not for under-18s, and we do not knowingly hold information about them.

If this policy changes in a way that affects you, we will email the address on your account. Questions go to support@docoform.com.