Data and deletion

Where it lives

On Cloudflare: forms and answers in its database, answers still being typed in its storage for live sessions, and uploaded files in its file storage. A copy of the database is made every night and kept for 30 days.

How long it's kept

• Sent answers: until you delete them, or your workspace.
• Answers that were never sent: 30 days after the person last touched them.
• A draft form built without an account: 30 days after it was started.
• Sign-in links: 15 minutes. Signed-in sessions: 30 days.
• Deleted data can stay in the nightly copies for up to 30 more days, then it's gone.

Getting it out

Results has Export CSV: one row per response, sent ones first, then unfinished ones, with Submitted, Status (Complete or Incomplete), a column per question, and Estimate and Estimate inputs on forms with an estimate. Uploaded files are listed by name. On Pro, the API gives the same responses, finished and unfinished.

When someone asks to be deleted

Every reminder ends with Delete my data. It deletes that person's answers to that form, with any files, and Wunderly never emails that address again. If someone asks you instead, write to privacy@wunderly.so with the form and their email and we'll delete them; they can write there themselves too.

Deleting your workspace

Settings ends with Delete workspace. Type the workspace's name and press Delete everything: its forms close, waiting reminders are cancelled, and every form, answer, file and member goes, usually within a few minutes. A paid plan is cancelled with Paddle first. An agency deletes its client workspaces before its own. What's kept is one line saying a workspace was deleted, with counts and no content.

On people's devices

Forms set no cookies. The one thing a form keeps on someone's device is the token that lets them pick up where they left off, on the form's own site, and it's removed when they send the form. Views are counted with a code that changes every day and is never stored on the device (how we count).