Privacy

One exception, for people with an account: when you sign in on wunderly.so we set one cookie that keeps you signed in. It's strictly necessary and does nothing else. Forms on wunderly.page and forms embedded on other sites set no cookies at all.

Who we are

Wunderly is a form builder run by [OWNER TO REVIEW] legal name and postal address of the business. Write to support@wunderly.so about anything on this page.

Two kinds of people use Wunderly, and we treat their data differently:

• Organizers build forms and have an account. For your account, we decide what's collected and why (we're the controller).
• Respondents fill in an organizer's form. The organizer decides what their form asks and what happens with the answers (they're the controller); we store and process the answers for them (we're their processor, under our data processing terms).

What we collect

From organizers

• Your email address, to send sign-in links. There are no passwords.
• Your workspace's name and time zone, and the forms you build.
• If you turn on reminders: the first name that signs them and your mailing address, which the law requires in every reminder's footer.
• A record that you're signed in, stored as a hash of the cookie, never the cookie itself.

From respondents, for the organizer

• Your answers, saved as you type so you can come back later. The form tells you this at the top before you start.
• Your email address or phone number, if the form asks and you give it.
• The estimate the form showed you, if it shows one.
• Your country, from the network your request came through, to decide which consent rules apply. We don't store your IP address.
• Which page the form was on, so a "pick up where you left off" link returns you there.
• Whether a reminder was sent to you, delivered and opened.

To let you resume, your browser keeps one token in local storage on the site where the form is. It isn't a cookie, it isn't shared with other sites, and it only identifies your own answers.

From people who report a form

If you report a form, we keep the link, what you said about it, and your email if you chose to give one, so we can act on it and write back. The report goes to our abuse mailbox. We don't keep your IP address, and we never show your email to the form's owner. We keep a report for [OWNER TO REVIEW] how long reports are kept.

To run the service

Counts of page loads and errors, without names or answers in them. When something breaks, the error record holds the page's address without its query string, never your answers.

Why

• To show forms, save answers and send them to the organizer.
• To show organizers who started their form and didn't finish, with the counts explained on how we count.
• To send the one reminder an organizer chose, only when our rules allow it (below), and the estimate email a respondent asks for.
• To sign organizers in, keep the service secure and stop abuse.

We don't sell data, show ads, or use answers to train anything.

The one reminder

An organizer can send at most one reminder to someone who didn't finish their form, and only one per person, ever. On quote forms the form says so under the email field before you type it. Respondents in the EU, the UK, Iceland, Liechtenstein, Norway and Switzerland are asked with a checkbox first, and an unticked box means no reminder. Surveys, feedback and other forms send none. Every email has a link to unsubscribe and a link to delete your data, and both work at once.

How long we keep it

• Unfinished answers: deleted after 30 days without activity.
• Sent answers: until the organizer deletes them or their workspace.
• Forms built on the homepage and never claimed: deleted after 30 days.
• Sign-in links: they work for 15 minutes, and used or expired ones are deleted. A sign-in lasts 30 days.
• Backups: a copy of the database is made every night and kept for 30 days, so deleted data can remain in a backup for up to 30 more days before it's gone.
• Error records: kept until we clear them [OWNER TO REVIEW] set a retention period.

Who else handles it

Two companies process data for us. We'll list any change on the changelog at least 30 days before it happens.

Data is stored on Cloudflare's network [OWNER TO REVIEW] confirm the database region and the transfer safeguards.

When we look at answers

Only to give support, when an organizer asks or a report needs it. Opening a workspace's answers is an explicit step in our ops console, it lasts an hour, and it writes a line in an audit log every time.

What you can do

• Respondents: use the "Delete my data" link in any email from a form, or ask the organizer. If you can't reach the organizer, write to us and we'll handle it.
• Organizers: export any form's answers as a spreadsheet, delete any response, or delete your whole workspace in Settings. Deletion is real, not hidden.
• Anyone can ask us what we hold about them, ask us to correct or delete it, or object to how it's used, at support@wunderly.so. You can also complain to your data protection authority.

Changes to this page

When this page changes, the date at the top changes and the changelog says what's different.