Privacy Policy
Last updated: October 14, 2026
Pinkit Forms ("we") lets you build forms and surveys by chatting with AI, share them and collect responses. Pinkit Forms is responsible for the information described here. This page explains what we keep, why, with whom, for how long, and your rights. Questions: support@pinkitforms.com.
It has two parts: for account owners (people who build forms), and for people who fill in a form.
What we keep
- Account: when you sign in with Google we get only your name and email address (never a password), plus when you joined and last visited.
- Forms and chats: your forms, your chat with the AI about each form, and your questions to the AI about responses with its answers. Our team reads chats to improve the service (for example the instructions the AI gets).
- Visitors who are not signed in: the AI chat is kept 90 days, linked only to a salted hash of the IP address. The IP address itself is never stored.
- Uploaded files (PDF, Word, text, photo) are not stored. They are sent once to the AI to build the form.
- Form responses: what respondents write is kept for the form's owner, with a salted hash of the IP to limit spam. Respondents do not sign in.
- Usage records: AI calls, tokens and cost, and events such as "form published", to manage cost and understand use.
- Feedback and reports sent through the site.
- Cookies: one sign-in cookie, needed to stay signed in. No advertising or tracking cookies. Language and theme choices stay in your browser.
Who processes it
- Cloudflare: hosting and database. The database is on servers in Western Europe.
- Anthropic (Claude models), in the United States: chats, uploaded files, and form responses when the owner asks for an analysis.
- Google: sign-in only. The site's fonts and files load from our own server, not from Google.
So data leaves Israel. We only work with providers that commit to protecting it.
We do not sell data or share it for advertising. We disclose data to authorities only when the law or a court order requires it. If the business is sold or merged, the data moves to the new owner under the same terms, and we will tell you in advance.
For people who fill in a form
- Who is responsible: the form was made by its owner, not by Pinkit Forms. The owner decides what to ask and what to do with the answers, and is responsible for them; we only store and process them for the owner. Read the privacy policy of whoever sent you the form.
- What is kept: your answers, when they were sent, and a salted hash of your IP address (to limit spam). You do not sign in and nothing else is kept about you.
- AI: the owner can ask for an analysis of the answers; they are then sent to Anthropic for that analysis only.
- We do not contact you: we never use contact details you wrote in a form to contact you.
- How long: as long as the owner keeps the form. If the owner deletes the form or their account, the answers are erased for good after 60 days.
- To see, correct or delete an answer: contact the form's owner. If you cannot reach them, write to us.
- Never send passwords, payment details or sensitive data through a form. Suspicious forms can be reported with the button at the bottom of every form.
Form owners: forms must not ask for passwords, payment details or sensitive data (such as health information).
How long
- Forms, chats and responses are kept until deleted.
- A deleted form is kept aside 60 days (restore it from "Recently deleted"), then erased with its responses and chats.
- A deleted account is closed at once: its forms stop taking responses, and you can no longer reach its data (signing in again with the same Google account starts a new, empty account). We keep the deleted data aside for 60 days only so that we can restore it if you write to us and ask; after 60 days it is erased with all its forms, responses and chats; usage records stay without any link to you.
- Database backups are kept 30 days, so deleted data may remain in them for up to 30 more days.
- Visitors' chats: 90 days.
- Usage records, feedback and form reports: two years.
Your rights
You can ask to see your data, get a copy, correct it or delete it. Delete your account in Profile, "Delete account". For anything else write to support@pinkitforms.com from your account's email address, so we can confirm it is you. We answer within 30 days. If you are not satisfied, you can complain to the Israeli Privacy Protection Authority (or the data protection authority where you live).
Security
All traffic is encrypted, sign-in codes are stored only as a hash, and every input is checked. If a security incident affects your data, we will notify you as the law requires.
Children
The service is not meant for children under 16.
Changes
If this policy changes we will update the date here, and announce material changes by email or on the site.