Privacy Policy

ARCHIVED 2025-03-01, DATE APPROXIMATE · VERSION 20250301_rev01 · COMPARED WITH 20240701_rev01

Full text changes — 20240701_rev01 to 20250301_rev01

COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED

 ## Privacy Policy
 This privacy policy explains how Jotform handles your personal information and data, and applies to all of the products, services and websites offered by Jotform Inc., Jotform Ltd, Jotform Pty Ltd, Jotform Canada Inc., and their affiliates (collectively, "Jotform"), except where otherwise noted. Jotform products, services and websites are collectively referred to as the "services" in this policy. Unless otherwise noted, all services are provided by Jotform Inc., which is based in the United States.
+In this policy, "you" refers to those who use and/or interact with any or all of our products, services, and websites, and "we", "us", and "our" refer to Jotform. "Customer"(s) refers specifically to those who use Jotform services. "Form Responders" refers to those who fill in and/or submit forms used by our Customers.
+In this policy, "you" refers to those who use and/or interact with any or all of our products, services, and websites, and "we", "us", and "our" refer to Jotform. "Customer"(s) refers specifically to those who use Jotform services. "Form Responders" refers to those who fill in and/or submit forms used by our Customers. "AI Tool Users" refers to those who interact with an AI Tool used by our Customers.
 ## INFORMATION WE COLLECT
 ### **From Our Customers**
 - **Registration information.** When you register for an account with us so you can create and/or use forms, we collect your username, password and email address.
 - **Billing information.** If you make a payment to Jotform Inc., we require that you provide your billing details, including name, address, email address and financial information corresponding to your selected method of payment (e.g. a credit card number and expiration date or a bank account number). If you provide a billing address, we will regard that as the location of the account holder. Our integrations with third party payment gateways are for processing only. We don't store or log any sensitive cardholder data provided by you or your form users. We follow industry-standard best practices to protect the security of cardholder data during processing and transmission. Jotform Inc. is certified as a PCI DSS Level 1 Compliant Service Provider, and we perform annual audits to ensure that our handling of your credit card information aligns with industry guidelines. [Read more here](https://www.jotform.com/blog/pci-dss-service-provider-level-i-compliant/).
 - **Account settings.** Our customers can set various preferences and personal details on pages, such as your [account settings page](https://www.jotform.com/myaccount/). For example, your default language, timezone and communication preferences (e.g. opting in or out of receiving marketing emails from us).
+- **Form data.** We store our customers' form data (questions and responses), in some cases using third party server providers such as Amazon Web Services and Google Cloud.
+- **Data you use to create forms is owned by you.** Jotform Inc. treats your forms as private, unless you make them available to members of the public. We don't sell or make forms you've created available to anyone, nor do we use the form responses you collect, for purposes unrelated to you or our services, except in a limited set of circumstances (e.g. Jotform Inc. is compelled by a subpoena or court order, or if you've given us permission to do so).
+- **Form data.** We store our customers' form data (form fields and input and data inputted in those fields), in some cases using third party server providers such as Amazon Web Services and Google Cloud.
+- **Data you use to create forms is owned by you.** We treat your forms as private, unless you make them available to members of the public. We don't sell or make forms you've created available to anyone, nor do we use the form responses you collect, for purposes unrelated to you or our services, except in a limited set of circumstances (e.g. if we are compelled by a subpoena or court order, or if you've given us permission to do so).
 - **Jotform safeguards responders' email addresses.** To make it easier for you to invite people to complete your forms via email, you may upload lists of email addresses, in which case we act as a mere custodian of that data. We don't sell these email addresses or make them available to others except as directed by you and in accordance with this policy. The same is true for any email addresses collected through your forms.
+- **Jotform Inc. holds your data securely.** Read our [Security Statement](https://www.jotform.com/security/) for more information.
+- **Jotform holds your data securely.** Read our [Security Statement](https://www.jotform.com/security/) for more information. This includes any personal information you provide to us, including but not limited to where a customer voluntarily shares their phone number or other sms information with us so we may contact them.
 - **Form data is stored on servers located in the United States.** Our customers have the option to store their data in the EU. See [https://www.jotform.com/security/](https://www.jotform.com/security/) for more information.
 ### **From Visitors to Our Websites**
 - **Usage data.** We collect usage data when you interact with our services. This may include which web pages you visit, what you click on, when you performed those actions, and so on. Additionally, like most websites today, our web servers keep log files that record data each time a device accesses those servers. The log files contain data about the nature of each access, including originating IP addresses, internet service providers, the files viewed on our site (e.g., HTML pages, graphics, etc.), operating system versions, and timestamps.
 - **Device data.** We collect data from the device and application you use to access our services, such as your IP address, operating system version, device type, system and performance information, and browser type. We may also infer your geographic location based on your IP address.
 We use information gathered from and provided by our Customers to do the following for our Customers:
 Provide services and technical support, assist them with form design and creation, provide technical troubleshooting, manage our relationship with them, and to gather information on how they use our services.
 Certain features of our services use the content of form questions and responses and Customer account information in additional ways. Feature descriptions will identify where this is the case. Customers can avoid the use of form data in this way by simply choosing not to use such features. For example, by using our form templates feature, to add questions to forms, you also permit us to aggregate the responses you receive to those questions with responses received by other form templates users who have used the same questions. We may then report statistics about the aggregated (and de-identified) data sent to you and other form creators.
+If you choose to link your Jotform account with a third party account, such as your Google or Facebook account, Jotform may use the information you allow us to collect from those third parties to provide you with additional features, services, and personalized content.
+We do not share our customers' or users' phone numbers or other personally-identifying mobile information or consents or opt-ins with third parties, affiliates, or partners, whether for marketing/promotional, or other purposes.
+**AI** **(Artificial Intelligence)**. We use AI (artificial intelligence) capabilities to help our users create and manage forms, to create AI "agents" that can assist the user in communicating with the user's customers, form responders, or end users, such as through chat or simulated phone calls. Such agents are by definition not human. Our users can choose whether to create and use agents. See our [AI policy](https://www.jotform.com/ai-policy/) for more information.
+**Third-Party Services and Apps**. If you choose to link your Jotform account with a third party account, such as your Google or Facebook account, Jotform may use the information you allow us to collect from those third parties to provide you with additional features, services, and personalized content.
+For your convenience, the services may provide links to third-party websites or services that we do not own or operate. We are not responsible for the practices employed by the owners or operators of any such websites or services. You use them at your own risk. Your use of and interactions with such websites and services are subject to the applicable third party's rules and policies, not ours. We suggest you review the privacy policies of such parties before providing any personal information.
 In order to provide you with useful options to use the services together with social media and other applications, we may give you the option to export information to, and collect information from, third party applications and websites, including platforms such as Google and Twitter and social networking sites such as Facebook. When exporting and collecting such information, you may be disclosing your information to the individuals or organizations responsible for operating and maintaining such third party applications and sites, and your information may be accessible by others visiting or using those applications or sites. We do not own or operate third party applications or websites that you connect with - you should review the privacy policies and statements of such websites to ensure you are comfortable with the ways in which they use the information you share with them.
+**To manage our services.** We use your information, including certain form data, for the following limited purposes:
+**We use your information, including certain form data, for the following limited purposes**:
 - **To monitor, maintain, and improve our services and features.** We internally perform statistical and other analysis on information we collect, including usage data, device data, referral data, question and response data and information from page tags, to analyze and measure user behavior and trends, to understand how people use our services, and to monitor, troubleshoot and improve our services, including to help us evaluate and design new features. We may use your information internally in order to keep our services secure and operational, such as for troubleshooting and testing purposes, and for service improvement, marketing, research and development purposes.
 - **To enforce our Terms of Use.**
 - **To prevent potentially illegal activities.**
 - **To screen for and prevent undesirable or abusive activity.** For example, we have automated systems that screen content for activities such as, phishing, spam, and fraud.
 ### **Legal Process and Law Enforcement Requests for Information**
 As a service provider, Jotform is legally required to turn over user data in our possession when we receive valid legal process from government authorities with proper jurisdiction. We strive to balance the needs of law enforcement and other legal process with the privacy of our customers and third parties who submit their information to our customers on their forms. Accordingly, we carefully review each legal and law enforcement request for information, and where we do produce personal information, we endeavor to produce only that information which is actually required.
 For parties in North America, disclosures are governed by U.S. law and the Federal Stored Communications Act ("SCA"), 18 U.S.C. §§ 2701-2712 . For parties outside the US, our disclosures are governed by the laws of the applicable jurisdiction. In general, we will turn over general information such as name, subscription inception date, information on form creation, email address, registration IP address, and, where we believe required, billing information. We require a valid subpoena, or a law enforcement request issued in connection with an official criminal investigation.
+### **Form Responders**
+### **Form Responders** **and AI Tool Users**
 Personal information a form responder includes in a form belongs to the responder, unless the responder has given rights in that information to the Customer who provided them with the form. Check with the Customer if you have questions about that. Form submission data is managed by the form creator (the Customer). Jotform treats that information as private unless the responder and/or Customer has made it publicly available. Please contact the form creator directly to understand how they use your form responses. Some form creators may provide you with a privacy policy or notice at the time you complete its form, and we encourage you to review that to understand how the form creator will handle your responses.
+In some cases, artificial intelligence (AI) capabilities assist you in filling in and/or submitting forms to our users, and in communicating with our users via chat or simulated phone calls.. When you provide information, including personal information with AI assistance, as part of such interactions with forms or our users, our AI providers may have access to the information you provide during such interactions. See our [AI policy](https://www.jotform.com/ai-policy/) for more information.
 We do not sell personal information gathered from form responses. We won't use any contact details collected in our customers' forms to contact form responders.
 See the section above for information on how we use data provided by our Customers or to which our Customers have given us access.
 ### **Website Visitors**
 Use of our websites is intended for adults at least eighteen (18) years of age. We do not knowingly collect personally-identifying information from children under the age of thirteen (13).
 ### **Generally**
 We may disclose information with third parties, for limited purposes, as follows:
+- **Your information to our service providers.** We use service providers who help us to provide you with our services. We give some personnel of these providers access to your information, but only to the extent necessary for them to perform their services for us. Our contracts with our service providers require them to maintain technical protections to ensure the confidentiality of your personal information and data, to use it only for the provision of their services to us, and to handle it in accordance with this privacy policy. Examples of service providers include payment processors, hosting services, email service providers, and web traffic analytics tools.
+- **Your information to our service providers.** We use service providers who help us to provide you with our services. We give some personnel of these providers access to your information, but only to the extent necessary for them to perform their services for us. Our contracts with our service providers require them to maintain technical protections to ensure the confidentiality of your personal information and data, to use it only for the provision of their services to us, and to handle it in accordance with this privacy policy. Examples of service providers include payment processors, hosting services, AI providers, email service providers, and web traffic analytics tools. See our [AI policy](https://www.jotform.com/ai-policy/) for information relating to AI, AI providers, privacy considerations, and the like.
 - **Your account details to your billing contact.** If your account holder details are different from the billing contact listed for your account, we may disclose your identity and account details to the billing contact upon their request. We typically will attempt to notify you of such requests. By using our services and agreeing to this privacy policy, you consent to this disclosure.
 - **Your email address to your organization.** If the email address under which you've registered your account belongs to or is controlled by an organization, we may disclose that email address to that organization in order to help it understand who associated with that organization uses our services, and to assist the organization with its enterprise accounts.
 - **Aggregated or de-identified (anonymized) information to third parties to improve or promote our services.** We do this so that no individuals can reasonably be identified or linked to any part of the information we share with third parties to improve or promote our services.
+- **The presence of a cookie to advertise our services.** We may ask advertising networks and exchanges to display ads promoting our services on other websites. We may ask such parties to deliver those ads based on the presence of a cookie that was placed when you visited one of our websites, but in doing so we will not share any other personal information with the advertiser. Our advertising network partners may also use cookies and page tags or web beacons to collect certain non-personal information about your activities on this and other websites to provide you with targeted advertising based upon your interests.
+- **The presence of a cookie to advertise our services.** We may ask advertising networks and exchanges to display ads promoting our services on other websites. We may ask such parties to deliver those ads based on the presence of a cookie or similar technology that was placed when you visited one of our websites, but in doing so we will not share any other personal information with the advertiser. Our advertising network partners may also use cookies and page tags or web beacons to collect certain non-personal information about your activities on this and other websites to provide you with targeted advertising based upon your interests.
 - **Your information if required or permitted by law.** We may disclose your information as required or permitted by law, or when we believe that disclosure is necessary to protect our rights, protect your safety or the safety of others, and/or to comply with a judicial proceeding, court order, subpoena, or other legal process served on us.
 - **Your information if there's a change in business ownership or structure.** If ownership of all or substantially all of our business changes, or we undertake a corporate reorganization, including a merger, acquisition or consolidation or any other action or transfer between Jotform entities, you expressly consent to Jotform Inc. transferring your information to the new owner or successor entity so that we can continue providing our services.
 - **Information you expressly consent to be shared.** For example, Jotform Inc. may expressly request your permission to provide your contact details to third parties for various purposes, including to allow those third parties to contact you for marketing purposes. If you give your permission, you may later revoke your permission, but if you wish to stop receiving communications from a third party to which we provided your information with your permission, you will need to contact that third party directly.
 - **If you're a Customer**, you are able to control who can take your form by changing your collector settings. For example, forms can be made completely public, and indexable by search engines. You can also choose to share your form responses instantly or at a public location.
 Please note that, if you're a form responder or Customer who has entrusted us with safeguarding the privacy of your personal information, we will not disclose or share it with third parties unless we have (a) given you notice, such as in this privacy policy, (b) obtained your express consent, such as through an opt-in checkbox, or (c) de-identified or aggregated the information so that individuals or other entities cannot reasonably be identified by it.
 ## BRAZIL USERS AND CUSTOMERS
 In most cases where Jotform may receive personal data of and/or for our Brazilian customers, the customer is the Controller under the LGPD, rather than Jotform. For purposes where Jotform does in fact function as a Controller with respect to our customer, our Privacy Team is the designated Data Protection Officer, and may be contacted at [privacy@jotform.com](mailto:privacy@jotform.com).
 If you have any questions about this privacy policy, you may contact us using [this form](https://www.jotform.com/privacyconcerns/).
+Revision May 30, 2024
+Revision February 26, 2025