Privacy Policy
ARCHIVED 2025-08-01, DATE APPROXIMATE · VERSION 20250801_rev01 · COMPARED WITH 20250701_rev01
Full text changes — 20250701_rev01 to 20250801_rev01
COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED
| 119 | 119 | In some cases, the applications or user interfaces you encounter while on our sites are managed by third parties, who may require that you provide your personal information. We are not responsible for the privacy practices of these third party services or applications. We recommend carefully reviewing the user terms and privacy statement of each third party service, website, and/or application prior to use. |
| 120 | 120 | |
| 121 | 121 | ## HOW LONG WE RETAIN YOUR INFORMATION |
| 122 | 122 | |
| 123 | 123 | We generally retain your information for as long as you have an account with us, as necessary to otherwise to provide services to you, to comply with our legal obligations, to enforce our agreements and terms of use, and for as long as one or more of your forms remain publicly accessible on our website. If you close your account and make your forms publicly unavailable through your account dashboard, your personal info will be deleted after one month. If your account has not been closed but is inactive for one year, we will hold your personal data in encrypted form for one additional year, at which time we will delete it. We will delete personal info in response to valid data subject requests made under applicable privacy law such as under the GDPR. This paragraph constitutes our data retention policy as to your personal information. |
| 124 | 124 | |
| 125 | ## REQUESTS TO DELETE, AMEND OR WITHDRAW CONSENT - NON-EEA, UK OR AUSTRALIAN RESIDENTS | |
| 125 | ## REQUESTS TO DELETE, AMEND OR WITHDRAW CONSENT - NON-EEA, UK SWISS OR AUSTRALIAN RESIDENTS | |
| 126 | 126 | |
| 127 | You may be entitled to request that we delete or amend your personal information. You may also be entitled to withdraw your consent, when consent is the basis for processing your personal information. We apply the same procedures, limitations and exceptions established for European Economic Area (EEA), UK and Australian residents in this privacy policy to all who make such requests to delete or amend personal information, or withdraw consent for processing personal information, regardless of geographic location. Please read the "Your Rights" paragraph under the "ADDITIONAL TERMS FOR EUROPEAN ECONOMIC AREA, UK AND AUSTRALIA RESIDENTS" below for details. If you are a resident of the EEA, UK or Australia, see below for more specific details on how that applies to you. | |
| 127 | You may be entitled to request that we delete or amend your personal information. You may also be entitled to withdraw your consent, when consent is the basis for processing your personal information. We apply the same procedures, limitations and exceptions established for European Economic Area (EEA), UK, Swiss and Australian residents in this privacy policy to all who make such requests to delete or amend personal information, or withdraw consent for processing personal information, regardless of geographic location. Please read the "Your Rights" paragraph under the "ADDITIONAL TERMS FOR EUROPEAN ECONOMIC AREA, UK, SWISS AND AUSTRALIA RESIDENTS" below for details. If you are a resident of the EEA, UK, Switzerland or Australia, see below for more specific details on how that applies to you. | |
| 128 | 128 | |
| 129 | ## ADDITIONAL TERMS FOR EUROPEAN ECONOMIC AREA, UK AND AUSTRALIA RESIDENTS | |
| 129 | ## ADDITIONAL TERMS FOR EUROPEAN ECONOMIC AREA, UK, SWISS AND AUSTRALIA RESIDENTS | |
| 130 | 130 | |
| 131 | 131 | ### **Legal Basis for Use of Your Information** |
| 132 | 132 | |
| 133 | 133 | Personal information that we collect is processed under the following legal basis: |
| 134 | 134 | |
| 135 | 135 | _Our legitimate interests_. This includes: |
| 210 | 210 | ## BRAZIL USERS AND CUSTOMERS |
| 211 | 211 | |
| 212 | 212 | In most cases where Jotform may receive personal data of and/or for our Brazilian customers, the customer is the Controller under the LGPD, rather than Jotform. For purposes where Jotform does in fact function as a Controller with respect to our customer, our Privacy Team is the designated Data Protection Officer, and may be contacted at [privacy@jotform.com](mailto:privacy@jotform.com). |
| 213 | 213 | |
| 214 | 214 | If you have any questions about this privacy policy, you may contact us using [this form](https://www.jotform.com/privacyconcerns/). |
| 215 | 215 | |
| 216 | Revision June 24, 2025 | |
| 216 | Revision July 11, 2025 |