# Privacy and data

What Nisuform stores with each submission, how to limit it, how long data is kept and how deletion works.

You decide what your forms collect. Nisuform stores the answers your form sends and a few details about each request, and gives you settings to collect less.

## What is stored with a submission

| Data                        | Stored              | Why                                                                 |
| --------------------------- | ------------------- | ------------------------------------------------------------------- |
| The answers your form sends | Always              | This is the submission.                                             |
| Uploaded files              | When uploads are on | Stored privately, see [File uploads](/docs/connect/file-uploads).   |
| Page the form was sent from | Always              | Shows where submissions come from.                                  |
| Browser and device type     | Always              | Helps spot bots and shows devices in analytics.                     |
| Country                     | Always              | Derived from the request, used for analytics and blocked countries. |
| IP address                  | Unless turned off   | Lets you block abusive senders.                                     |

Special fields like `_gotcha`, `_elapsed` and the Turnstile token are never stored. Submissions dropped as bots or blocked are not stored at all.

## Stop storing IP addresses

Turn off **Store IP addresses** in the form's **Settings**, **Spam protection**. New submissions are stored without an IP address. Rate limits and IP blocking keep working, because they check the address while the request is handled without saving it.

## Collect only what you need

* Ask only for the fields you use. Every field you add is data you are responsible for.
* Link to your privacy policy from the form, and add a **Checkbox** field for consent where the law requires one.
* Don't collect passwords, card numbers or other highly sensitive data through forms.

## Security

* Data is encrypted in transit and at rest.
* Uploaded files are checked by their contents, stored privately and only shared through links that expire after 15 minutes.
* Webhooks are signed, so your server can reject anything that didn't come from Nisuform.
* Form keys only allow sending submissions. They can't read data.

## Retention and deletion

Submissions are kept until you delete them. There is no automatic expiry.

| You delete   | What is removed                                                   |
| ------------ | ----------------------------------------------------------------- |
| A submission | The submission and its files.                                     |
| A form       | The form, all of its submissions and files, and its integrations. |
| A team       | All of its forms, submissions and files.                          |
| Your account | Your profile and every team you own.                              |

Deleted data is removed within 30 days and purged from encrypted backups within a further 90 days. Export anything you want to keep first.

## Data Processing Agreement

If you collect personal data from people in the EU or UK, Nisuform processes it on your behalf. The [Data Processing Agreement](/dpa) is included with every account. It lists our subprocessors and security measures. See also the [Privacy Policy](/privacy).

## Requests from the people who filled in your form

When someone asks you to see or delete their data, find their submissions in the inbox or in a [CSV export](/docs/submissions/export), then send them a copy or delete them. Contact [support@nisuform.com](mailto:support@nisuform.com) if you need help.