Plain-language policy

Privacy

Preview policy · Last updated July 11, 2026

This is a product-ready draft, not legal advice. It must be reviewed with the final company identity, data locations, subprocessors, and retention periods before paid launch.

The short version

We collect only what is needed to run ResponseMint, secure accounts, process form responses, and improve reliability. Workspace owners control their forms and responses. We do not sell personal information or use response content to train advertising models.

Account data

We store the name, email address, workspace membership, subscription state, and security records needed to provide an account. Passwords are transformed with a one-way, salted key-derivation function; we never store the original password.

Form responses

A workspace owner decides what a form asks. ResponseMint stores submitted answers, timestamps, completion duration, and hidden attribution parameters selected by the owner. Network signals such as IP address may be processed transiently for rate limiting and abuse prevention but are not stored with the response. Draft answers saved in a respondent browser stay in that browser until submission or expiry.

Infrastructure

The service runs on Cloudflare Workers. Structured application data is stored in Cloudflare D1 and uploaded files in private Cloudflare R2 buckets. Cloudflare processes network and security information as our infrastructure provider.

Retention and deletion

Workspace owners can delete individual responses and forms. Deleted application records are removed from active storage promptly and may remain in encrypted backups until their normal expiry. Account deletion and full-workspace export will be available before paid launch.

Sharing and subprocessors

We disclose data only to service providers needed to operate the product, to comply with law, or during a corporate transaction with appropriate notice and safeguards. A final subprocessor list will be published before general availability.

Your choices

You may ask to access, correct, export, or delete account data. Respondents should usually contact the organization that published a form because that organization determines why the response is collected.

Contact

Privacy questions can be sent to privacy@responsemint.io.