Security and data handling

Your forms and responses belong to you.

Isolation

Every row of workspace data is protected by row-level security, so one account can never read another account's forms or responses.

Public forms

Published forms accept anonymous submissions through a locked-down server route. Respondents can submit, but they can never read existing responses.

AI processing

Prompts, transcripts and summaries are sent to model providers only to produce your result. They are not used to train models.

Deletion

Deleting a form deletes its responses. Account deletion removes your workspace data.