Last updated 28 October 2026

Privacy Policy

This page explains what information InvoyForm collects, why we collect it, and what you can do about it.

What we collect

• Your account: your name, email address and profile picture (from Google, if you sign in with Google). Passwords are stored hashed.
• Your work: your forms, your workspaces and the images you upload.
• Responses: the answers people send to your forms, and the files they upload with them.
• Your plan: which plan you are on and your billing events. Card details go to our payment provider, never to us.
• Connected tools: the keys and tokens of tools you connect, like a payment account or Google Sheets. These are stored encrypted.
• Technical details: your IP address, browser and basic logs, to keep the service running and safe.

We do not sell your information. We do not show ads and we do not use third-party tracking.

Responses to your forms

The answers people send to a form belong to the person or team that made the form. We store them and hand them to the form owner, and we use them for nothing else.

If you filled in someone’s form and want your answer changed or deleted, ask the owner of the form. If you cannot reach them, write to [email protected].

Who has access to your data

As of now, InvoyForm is solely developed and maintained by a single developer, Abhinav Prakash, who may have access to the information stored in the service.

We take reasonable steps to protect personal information and restrict access to authorized purposes. We may also use other infrastructure and service providers as necessary to operate InvoyForm. We may share information when the law requires it.

How we protect it

Passwords are hashed. Keys and tokens of connected tools are encrypted. Everything travels over a secure connection. No service is perfectly safe, so if something goes wrong that affects your data, we will tell you what happened and what to do.

Google data

Some features connect to your Google account only when you ask them to.

• Sign in with Google: we read your name, email address and profile picture to make your account. The sign-in tokens are stored encrypted.
• Import from Google Forms: your browser asks Google for permission to read the form you choose, reads it once, and builds the same form here. The access token stays in your browser. It is not sent to our servers and it is not kept. We never change anything in your Google Forms.
• Google Sheets: if you connect it, we write responses to the sheets that InvoyForm makes for your forms, and we cannot see the rest of your Drive. The token is stored encrypted. You can disconnect it any time, in your form or in your Google account.

InvoyForm’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• We use Google user data only to give you the feature you asked for.
• We do not share it with anyone else, except the service providers we need to run InvoyForm, or when the law requires it. We never sell it or give it to data brokers.
• We do not use it for ads.
• We do not use Google Workspace API data to develop, improve or train generalized or non-personalized AI or machine learning models.
• We keep it only as long as the feature needs it: the sign-in details while your account exists, and the Google Sheets token until you disconnect it. For Google Forms, the access token is never kept. The questions you import become your form, which we keep like any other form of yours once you save or publish it. Until then they are only in your browser.
• To delete it, disconnect Google Sheets in your form, delete your account, or write to [email protected]. You can also remove InvoyForm’s access any time in your Google account.
• If we change how we use Google user data, we will tell you before the change applies.

Emails from us

We send the emails your account needs: sign in and password emails, invitations, and the notifications you set up for your forms. We may also send you news or offers about InvoyForm. Every such email has an unsubscribe link, or you can write to [email protected] and we will stop.

Cookies

We use only the cookies InvoyForm needs to work: one that keeps you signed in, and one while you add a passkey. We also keep your unsent form draft, theme and view choices in your browser’s local storage. We do not use advertising cookies.

How long we keep your data

We keep your data while your account is active. If you ask us to delete your account, we do it as soon as possible, and within about 20 days.

• A workspace that no longer fits your plan is locked, and after 45 days its forms, responses and files are deleted.
• A file that someone adds to a form but never sends is removed after a day.
• We may keep payment records as long as the law asks.

Your rights

You can ask us for a copy of your data, to correct it, or to delete it. Depending on where you live, the law may give you more rights. Write to [email protected] and we will answer as soon as possible.

Changes

If we change this page, we update the date at the top. For a change that matters to you, we will also tell you by email or in the dashboard.

Contact

Write to [email protected] with any question about this page.