Privacy Policy

MATERIAL

FIRST SEEN 2026-09-01 · VERSION 20260901_rev01 · COMPARED WITH 20260813_rev01

What changed, in plain language

Jotform rewrote the section for people who fill out other people's forms. The new text says clearly that the form creator — not Jotform — is the one asking for and collecting your information, warns that forms may ask for health or medical details, and for the first time says that outside helpers including AI providers may be able to see what you submit. Two older bullets were deleted: one explaining that the form creator is responsible for the data and may have its own privacy policy, and one explaining whether your answers can be anonymous. The revision date moved from January 12, 2026 to August 31, 2026.

Changes that may affect you

AI providers may be able to read what you submit in a formMATERIAL

DATA SHARING

The policy now says outside helper companies, including AI providers, may be able to access the information you type into someone's form. The old version only mentioned storage companies like Amazon Web Services or Google Cloud. Since the same paragraph says forms may ask for health or medical details, this means sensitive answers can pass through AI vendors. Jotform still says it doesn't sell or actively share submissions, so the sharing is limited to service providers — but the group of companies that can see your data is now clearly wider.

“In some cases, those subprocessors may be able to access the information submitted in forms.”

What you can do — Before entering health, financial, or other sensitive details in a Jotform form, check the list at jotform.com/subprocessors and the AI policy at jotform.com/ai-policy to see which companies may handle it, and ask the form creator where your answers go.

Guidance on anonymity and on contacting the form creator was removedMINOR

OTHER

Jotform deleted the part that explained whether your form answers can be anonymous and the part telling you to contact the form creator with questions and to check their separate privacy policy. Nothing about your rights changed, but you now get less help figuring out who holds your data and whether you can stay anonymous.

“We provide information to form creators on how they can collect responses anonymously.”

What you can do — If you care about staying anonymous, ask the person or company that sent you the form how they configured it and whether they keep your IP address or email.

Responsibility for sensitive answers is pushed onto youMINOR

USER OBLIGATIONS

The new wording tells you that if you don't want the form creator or Jotform to have your information, you simply shouldn't type it in. That's a fair warning, but it also shifts the burden to you rather than to the company hosting the form.

“Don't provide your personal information in a form if you don't want our customer to have it, or for Jotform to have access to it by virtue of the forms and form submissions being hosted on our platform.”

What you can do — Fill in only the fields you're comfortable sharing, and ask the form creator whether any sensitive question is actually required.

Changelog

+ ADDEDNew warning that AI providers and other helpers may see your form answers
The policy now says Jotform uses outside companies ("subprocessors"), including AI providers, to run its platform, and that these companies may be able to see the information you type into a form. The old version only mentioned server companies like Amazon Web Services or Google Cloud storing the data.
We collect and store the form responses that you submit, in some cases using third party server providers like Amazon Web Services or Google Cloud, on behalf of our Customers.
In some cases, those subprocessors may be able to access the information submitted in forms.
+ ADDEDPolicy now tells you not to fill in a form if you don't want Jotform to see it
The new text puts the choice on you: if you don't want the form creator or Jotform to have your information, don't type it in. It also says out loud that Jotform has access to submissions because they are hosted on its platform.
Don't provide your personal information in a form if you don't want our customer to have it, or for Jotform to have access to it by virtue of the forms and form submissions being hosted on our platform.
+ ADDEDExplicitly mentions health and medical information
The policy now says plainly that a customer's form may ask for your health or medical information, and that the customer — not Jotform — is the one collecting it.
In some cases, our customers' forms ask for your personal information, which may include your health or medical information.
− REMOVEDSection on whether your answers are anonymous was deleted
The old policy had a short explainer telling you that anonymity depends on how the form creator set up the form, that Jotform gives creators instructions for collecting answers anonymously, and that questions in the form might still identify you. All of that is gone.
We provide information to form creators on how they can collect responses anonymously.
− REMOVEDAdvice to contact the form creator and read their privacy policy was deleted
The old text told you to contact the form creator with questions about the form or the data, and noted the form creator may have its own privacy policy. The new text still says the customer is the one collecting your data, but drops the practical instructions.
The form creator may have their own privacy policy.
+ ADDEDNew promise not to share submissions with third parties
The new text adds a statement that Jotform does not send or actively share form submissions with third parties, and that it requires its customers to protect the data they collect. This is a plus for people filling out forms, though it sits right next to the subprocessor exception.
We secure the form submission data and require our customers to protect the personal data they gather.
± CHANGEDRevision date updated
The date at the bottom of the policy changed from January 12, 2026 to August 31, 2026.
Revision January 12, 2026
Revision August 31, 2026

Full text changes — 20260813_rev01 to 20260901_rev01

COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED

 - **Information from third parties.** We may collect your personal information or data from third parties, if you have given permission to those third parties to share your information.
 - **Information from page tags.** We use third party tracking services that employ cookies and page tags (also known as [web beacons](https://en.wikipedia.org/wiki/Web_bug)) to collect aggregated and anonymized data about visitors to our websites. This data includes usage and user statistics. Emails sent by Jotform or by users through our services may include page tags that allow the sender to collect information about who opened those emails and clicked on links in them. We do this to allow the email sender to measure the performance of their email messaging and to learn how to improve email deliverability and open rates.
 - **See our** [**Cookie Policy**](https://www.jotform.com/cookie-policy/) **for more info**
 ### **From Form Responders**
+When you fill in or complete a form used by one of our Customers, we collect information relating to you and your use of our services:
+Jotform provides a platform/website where our customers can create and publish forms so they can collect information from third parties. In some cases, our customers' forms ask for your personal information, which may include your health or medical information. In all such cases, our customer is the party asking for your information, and collecting it if you provide it, rather than Jotform. Don't provide your personal information in a form if you don't want our customer to have it, or for Jotform to have access to it by virtue of the forms and form submissions being hosted on our platform. We secure the form submission data and require our customers to protect the personal data they gather. We don't send or actively share the submissions or submission data with third parties, but note that we utilize certain [subprocessors](https://www.jotform.com/subprocessors/), including certain [AI](https://www.jotform.com/ai-policy/) providers, who help provide the functionality available on our platform to our customers and to those who choose to fill in and submit forms. In some cases, those subprocessors may be able to access the information submitted in forms.
+- **Form responses.** We collect and store the form responses that you submit, in some cases using third party server providers like Amazon Web Services or Google Cloud, on behalf of our Customers. The form creator (Customer) is responsible for this data, and they manage it. A form may ask you to provide personal information or data. If you have any questions about a form which a Customer has sent to you or given you access to fill in, or about the data to be provided in the form, please contact the form creator directly, since Jotform is not responsible for the content of that form. The form creator may have their own privacy policy.
+- **Are your form responses anonymous?**You will need to ask the form creator as it depends on how the individual, company or organization has chosen to configure the form(s). We provide information to form creators on how they can collect responses anonymously. However, even if a form creator has followed those steps, specific questions in the form may still ask you for your personal information or data that could be used to identify you.
 ## HOW WE USE AND DISCLOSE YOUR INFORMATION
 ### **Customers**
 We treat unique form questions and responses as information that is private, unless a party other than Jotform has made that information public. We don't use form data other than as described in this privacy policy without our Customers' consent. We don't sell Customers' form data, nor do we make it available to third parties without the Customer's permission.
 ## BRAZIL USERS AND CUSTOMERS
 In most cases where Jotform may receive personal data of and/or for our Brazilian customers, the customer is the Controller under the LGPD, rather than Jotform. For purposes where Jotform does in fact function as a Controller with respect to our customer, our Privacy Team is the designated Data Protection Officer, and may be contacted at [privacy@jotform.com](mailto:privacy@jotform.com).
 If you have any questions about this privacy policy, you may contact us using [this form](https://www.jotform.com/privacyconcerns/).
+Revision January 12, 2026
+Revision August 31, 2026