Legal
Data Processing Addendum
This Data Processing Addendum (DPA) explains how splitforms processes personal data for customers who use our form backend. It is incorporated by reference into the splitforms Terms of Service for customers who process personal data through the service.
Last updated: June 2026
Roles
You are the controller of form submissions and account data you send to splitforms. splitforms acts as your processor for that data and processes it only to provide, secure, support, and improve the service.
Processing Details
The subject matter is hosted form submission handling. The duration is the term of your account plus any retention period needed for backups, deletion workflows, legal obligations, or abuse prevention.
Personal data may include names, email addresses, IP addresses, user agents, submitted form fields, file-upload metadata, webhook delivery metadata, and account information. Data subjects include account users and people who submit forms powered by splitforms.
Security Measures
We protect submissions with TLS in transit, encryption at rest, row-level access controls, per-form access keys, domain locking, rate limits, audit-oriented logging, and spam and abuse controls. Operational access is restricted to service operators with a support or security need.
See the Security page for more detail.
Subprocessors
splitforms uses subprocessors to provide infrastructure, storage, authentication, email delivery, payments, and hosting. The current list is maintained in our Privacy Policy and may be updated as the service changes.
We remain responsible for subprocessors we appoint and require them to protect customer data using appropriate security and confidentiality obligations.
International Transfers
Where personal data is transferred internationally, splitforms relies on appropriate transfer mechanisms, including Standard Contractual Clauses where required.
Data Subject Requests
You can export, delete, and manage submissions from the dashboard. If you receive a data subject request that requires splitforms assistance, email privacy@splitforms.com. We will provide reasonable assistance within the scope of the service.
Deletion And Return
You may delete submissions or your account from the dashboard. Account deletion removes associated forms and submissions from production systems, with backup and abuse-prevention records expiring through normal retention processes.
Signed Copies And Custom Terms
This public DPA is the standard self-serve version. For a signed PDF copy, vendor review, or custom enterprise DPA, email privacy@splitforms.com.