Quill Forms

Privacy Policy

Last updated: January 14, 2026

Introduction

Quill Forms ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our form building and submission collection service.

Information We Collect

Account Information

When you register for an account, we collect:

  • Email address
  • Full name
  • Organization name (if applicable)
  • Password (encrypted and stored securely)

Form Submission Data

When end-users submit forms created on Quill Forms, we collect and process the data they provide according to the form configuration. This may include:

  • Form responses and input data
  • Submission timestamps
  • IP addresses (for anti-spam purposes)

Usage Information

We collect information about how you interact with our service, including pages visited, features used, and forms created.

Cookie Policy

Quill Forms uses only essential cookies necessary for the operation of our service. We do not use advertising, tracking, or analytics cookies.

Essential Cookies

We use authentication cookies provided by Supabase to:

  • Maintain your logged-in session
  • Remember your authentication state
  • Secure your account access

These cookies are strictly necessary for the service to function and cannot be disabled while using Quill Forms.

How We Use Your Information

We use collected information to:

  • Provide and maintain our form building service
  • Process and deliver form submissions via email or webhooks
  • Send you important service updates and notifications
  • Respond to your support requests
  • Improve and optimize our service
  • Prevent fraud and abuse

Personally Identifiable Information (PII) Protection

Quill Forms includes built-in PII protection features:

  • Form creators can mark specific fields as containing PII (personally identifiable information)
  • After form submissions are successfully delivered via email or webhook, PII fields are automatically anonymized in our database
  • This ensures sensitive personal information is only retained as long as necessary for delivery
  • PII data is encrypted in transit and at rest

Data Sharing and Disclosure

We do not sell or rent your personal information to third parties. We may share your information only in the following circumstances:

  • Service Providers: We use Supabase for authentication and database services, and Resend for email delivery
  • Form Submissions: Submission data is delivered to the email addresses or webhook URLs specified by the form creator
  • Legal Requirements: When required by law or to protect our rights and safety

Data Retention

We retain your account information for as long as your account is active. Form submission data is retained according to your account settings. PII-marked fields are automatically anonymized after successful egress (email or webhook delivery). You can request deletion of your data at any time by contacting us.

GDPR Compliance

If you are located in the European Economic Area (EEA), you have certain data protection rights, including:

  • The right to access, update, or delete your personal information
  • The right to data portability
  • The right to object to processing of your data
  • The right to restrict processing of your data
  • The right to withdraw consent at any time

To exercise these rights, please contact us using the information provided below.

Data Security

We implement appropriate technical and organizational security measures to protect your information. This includes encryption in transit (HTTPS/TLS), encrypted data storage, secure authentication practices, and regular security updates. However, no method of transmission over the Internet is 100% secure.

Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: