Privacy and data retention

Last updated August 2026. This page describes what DataMold stores, where it lives, and exactly when it is deleted. The retention periods below are not marketing copy: they are the values the nightly job actually enforces.

What we hold

Two separate stores, deliberately:

• Your account. Your name, email address and profile picture from Google, which workspaces you belong to, your role in each, your plan and your payment records.
• Your workspace. Your forms, the responses people submit to them, any files they upload, your saved views, reports, API keys and webhook configuration. Each workspace lives in its own isolated database that no other customer's queries can reach.

We never sell any of it, and we do not use the contents of your forms or responses to train anything.

Sign-in

Sign-in is Google only. We receive your Google account id, email address, name and picture. We never see or store a password, and we do not request access to anything else in your Google account.

Responses collected through your forms

When someone fills in one of your forms, you are the controller of what they submit and we process it on your behalf. Alongside the answers we record the time, the source (hosted page, embed, or API), the IP address and the browser's user-agent string — enough to investigate abuse, and no more. Deleting a response deletes those too.

How long we keep things

While your plan is current

We keep every response and every uploaded file for as long as your workspace is active. We never delete data on a schedule while you are on a paid plan.

If a paid plan lapses

1. A 30-day retention period begins. Nothing is deleted. Your forms keep accepting responses, at the Free plan's monthly write limit. Your data stays complete and downloadable in full, from Settings, throughout.
2. After 30 days the workspace returns to the Free plan. At that point:
   • Every uploaded file is permanently deleted — file uploads are a paid feature, and we do not hold files for workspaces that are not paying for storage.
   • Responses older than 90 days are permanently deleted. Newer responses, and all of your forms, are kept.

Both deletions are irreversible. Take a backup during the 30-day window if you want to keep the files.

On the Free plan

Responses older than 90 days are removed by the same nightly job. Your forms, settings and recent responses are unaffected, and the 90-day window rolls forward every day.

If you close a workspace

Deregistering a workspace starts a recovery window during which an owner can undo it. Once that window closes, the workspace's entire database is destroyed and every file it held is deleted from object storage. Nothing is recoverable afterwards, by you or by us.

Other retention

• Sessions expire 30 days after they were last used, and are deleted when they expire.
• Unaccepted invitations expire after 14 days and are then deleted.
• Webhook delivery logs are kept for 7 days.
• The platform audit trail is kept for 12 months.
• Payment records are kept for as long as tax and accounting law requires, regardless of what happens to the workspace.

Where it lives

Everything runs on Cloudflare's network. Your workspace database is a Durable Object, your files are in R2, and your account record is in D1. Data is encrypted in transit and at rest.

Getting your data out

Any owner or admin can download a complete backup of a workspace as a single JSON file, and any editor can export any form's responses as Excel, CSV or JSON. There is no export fee and no waiting period — you can do it right now, from Settings, on any plan.

Deleting your data

Delete a single response, a whole form, or the entire workspace. Deletion is immediate in the database and removes the associated files from object storage in the same operation. To delete your personal account entirely, leave every workspace you belong to and contact us.

Sub-processors

• Cloudflare — hosting, storage and network.
• Google — sign-in only.
• Razorpay — payment processing. Card details never reach us.

Contact

Questions about any of this, a data request, or a security report: get in touch. We answer data requests within 30 days.