Who we are
Formspring is operated by Pixel & Process UG (haftungsbeschränkt), Marliring 74, 23566 Lübeck, Germany. You can reach us at info@pixelandprocess.de for any privacy question or request. When you build a form, survey, or funnel with Formspring, you are the controller of the personal information your respondents submit. Formspring acts as a processor on your behalf for that respondent data. For your own account and billing information, Formspring is the controller. Data Protection Officer: based on the nature and scope of our processing, Pixel & Process UG (haftungsbeschränkt) is not legally required to appoint a Data Protection Officer under Art. 37 GDPR or § 38 BDSG. The contact for all privacy matters is info@pixelandprocess.de.
Where your data is stored (a privacy advantage)
Unlike many US-based form tools, all customer data and all form file uploads are stored in Germany. Application servers, databases, background jobs, and object storage run in German data centers (Falkenstein, Nuremberg, and Frankfurt). Transactional email is sent through a provider's EU data center. Billing is processed by a payment provider in the EU. For US customers this means your respondents' data benefits from one of the strongest privacy regimes in the world by default - without you having to configure anything.
Information we collect
- Account information: name, email address, password hash, team and role information. - Billing information: subscription plan, billing status, and invoices. Card and bank details are handled by our payment processor and are never stored on our servers. - Form submission content: whatever your respondents enter into your forms, surveys, and funnels, including file uploads. - Technical data: IP addresses, browser and device information, and server log data, used to deliver the service securely and to detect spam and abuse. - Support and communications: messages you send us and our replies. Source of the data: we collect personal information directly from you when you create and manage your account, and from your respondents when they submit your forms, surveys, and funnels. Where you process personal data about third parties through Formspring, you are the controller responsible for the source of that data and for the information notice owed to those individuals (Art. 14 GDPR).
How we use information
We use personal information to provide and operate the Formspring service, accept and manage form submissions, detect spam and abuse, deliver notifications and webhooks, process billing, keep the service secure, and meet our legal obligations. We do not use submission content for advertising, and we do not build advertising profiles.
Automated decision-making and profiling
Formspring does not carry out automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you within the meaning of Art. 22 GDPR. Optional AI features (such as moderation, categorization, or summaries) assist you when you enable them and do not make automated decisions with legal or similarly significant effects.
GDPR: purposes of processing and legal bases
Where the GDPR applies, we process personal information for clearly defined purposes of processing: operating and delivering the Formspring service, accepting and managing form submissions, securing the service, preventing spam and abuse, processing billing, and meeting our legal obligations. Legal bases (Art. 6 GDPR): we rely on performance of our contract with you (Art. 6(1)(b)); our legitimate interests (Art. 6(1)(f)), which we name concretely as operating the service, securing it, and preventing spam and abuse; your consent (Art. 6(1)(a), for optional cookies and embeds); and compliance with legal obligations (Art. 6(1)(c)).
GDPR: your rights
You have the right to access, correct, delete, restrict, and port your personal information, to object to certain processing, and to withdraw consent at any time without affecting processing already carried out. You may also lodge a complaint with a supervisory authority. To exercise any of these rights, contact info@pixelandprocess.de.
California privacy rights (CCPA/CPRA)
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives you specific rights over your personal information. Categories of personal information we collect: identifiers (such as name, email address, and IP address); customer account records; commercial information (such as your subscription and billing status); internet and network activity (such as log data); and the content you and your respondents submit through forms. We collect this information to provide the service as described above. Your California rights: - Right to know / access: you can request the categories and specific pieces of personal information we have collected about you. - Right to delete: you can request that we delete personal information we have collected from you. - Right to correct: you can request that we correct inaccurate personal information. - Right to opt out of the "sale" or "sharing" of personal information. - Right to non-discrimination: we will not deny you service, charge you a different price, or provide a different level of service because you exercised your privacy rights.
We do not sell your personal information
Formspring does not sell personal information, and we do not "share" personal information for cross-context behavioral advertising, as those terms are defined under the CCPA/CPRA. We have not sold or shared personal information in the preceding twelve months. Because we do not sell or share personal information, there is no opt-out to submit - but if this ever changes, we will update this policy and provide a clear opt-out mechanism first.
How to exercise your rights
To exercise any GDPR or CCPA/CPRA right, email info@pixelandprocess.de from the address associated with your account, or write to Pixel & Process UG (haftungsbeschränkt), Marliring 74, 23566 Lübeck, Germany. We will verify your identity before acting on a request and will respond within the timeframes required by applicable law. You may use an authorized agent to submit a request on your behalf. If you are a respondent who submitted information through a form built by one of our customers, please contact that customer directly - they control that data - though we will assist them in responding to your request.
Cookies and analytics
Our marketing site uses only strictly necessary cookies (session, security, and your consent choice). Optional embeds (such as videos and the payment checkout) load only after you consent. We use a cookieless, privacy-friendly analytics tool that does not store IP addresses, does not track you across sites, and collects no personally identifiable information. We do not run advertising trackers. You can review or change your choices at any time on the cookie settings page.
Service providers we rely on
We work with a small set of vetted providers to deliver Formspring. Each one is bound by a data processing agreement and is listed, with its purpose and region, on our sub-processors page: - Hetzner - application hosting, databases, and object storage for file uploads, in Germany. - Stripe - payment processing, subscriptions, and invoicing, in the EU. - Postmark - transactional email (notifications, autoresponders, account email), in an EU data center. - hCaptcha - optional, per-form CAPTCHA verification. - Akismet - optional, per-form spam scoring. - Anthropic and OpenAI - optional AI moderation, categorization, and summaries on paid plans, with zero-retention settings. The AI providers are used only when a customer turns those features on.
Data retention
Submission data is retained according to your plan. On the Free plan, submissions are automatically deleted after 30 days. On paid plans, submissions are kept until you delete them, unless you configure a shorter per-form retention period. File uploads are deleted together with their submission, and signed download links expire shortly after they are issued.
Children
Formspring is a business tool and is not directed to children. We do not knowingly collect personal information from children under 13 (or the equivalent minimum age in your jurisdiction).
Changes to this policy
We may update this Privacy Policy as the service evolves. When we make material changes, we will update the effective date at the top of this page and, where appropriate, notify you directly.