This policy explains what data TidyForms (“we”, “us”) handles when a Shopify merchant installs the TidyForms Contact Form Builder app (“the app”), when their customers fill in a form, and when you visit tidyforms.app. TidyForms is in beta; we will update this page as the product changes and note the date above.
Who is who
For form submissions, the merchant is the controller: they decide what their forms ask and what happens to the answers. TidyForms is the processor and handles that data only to run the service for the merchant.
Data we handle
- Store data from Shopify when a merchant installs the app: the shop domain, store name, contact email, plan, theme settings needed to match the form’s style, and, only if the merchant turns these features on, customer records and tags.
- Form submissions: whatever the merchant’s form asks for, such as name, email, phone, messages and uploaded files, plus technical details used for spam protection (IP address, browser, time taken to fill in the form).
- Beta sign-ups and support: your email, store URL and anything you write to us.
- This website: standard server logs (IP address, pages requested, browser). We do not use advertising cookies on tidyforms.app.
How we use it
- To store submissions, show them in the merchant’s inbox, and deliver them to the email addresses and integrations the merchant chose.
- To block spam and abuse.
- To bill merchants through Shopify, give support, and keep the service secure and working.
We do not sell personal data, and we do not use submissions to advertise to anyone.
Who we share it with
Only the service providers we need to run TidyForms, under contracts that limit them to that purpose: Shopify (the platform and billing), our hosting provider, our email delivery provider, Cloudflare (file storage and bot checks), and an error-tracking service. When a merchant connects an integration such as Klaviyo, Mailchimp or Google Sheets, we send submissions there on their instruction.
Where it’s stored and for how long
Data is stored on servers in the United States. Submissions are kept for as long as the merchant’s plan allows (30 days on Free, until deleted on paid plans) or until the merchant deletes them. When a merchant uninstalls the app, we delete their store’s data within 48 hours of Shopify’s data-erasure request, except where the law requires us to keep billing records.
Your rights
If you filled in a form on a store that uses TidyForms, contact that store first; they control your data and we will help them with your request. Shopify also passes customer data and deletion requests to us, and we act on them. You can always write to us at hello@tidyforms.app.
Security
Data is encrypted in transit (HTTPS), access is limited to the people who need it to run the service, and every submission is stored before anything is sent so it isn’t lost.
Contact
Questions about privacy: hello@tidyforms.app.