This privacy policy explains how Nice Forms processes personal data when you visit the website, create an account, run a survey, or answer one. It is intended to meet Articles 13 and 14 of the GDPR.
1. Controller
The controller for processing related to this website and to Nice Forms accounts is:
- Name
- Eugen Gette
- Service
- Nice Forms
- Contact
- Contact form
If you run a survey and collect answers from other people, you are the controller for that respondent data. Nice Forms then processes those answers on your behalf as a processor.
2. Data we process
Depending on how you use Nice Forms, we process:
- Account data: name, email address, password hash, workspace membership, plan, and Stripe billing identifiers if you subscribe to Pro.
- Survey data: titles, questions, themes, images you upload, settings, and publish state.
- Response data: answers submitted to your surveys, including optional name and email if you enable lead capture.
- Usage data for surveys: anonymous visit sessions used to calculate views, drop-off, and completion.
- Support data: messages sent through the contact form.
- Technical data: IP address in server logs for a short period, browser type, and security-related events.
Respondents do not need an account. Public surveys can be answered without login.
3. Purposes and legal bases
- Performing the contract (Art. 6 (1) (b) GDPR): creating accounts, building and publishing surveys, collecting answers, team invites, billing for Pro, and sending transactional email.
- Legitimate interests (Art. 6 (1) (f) GDPR): keeping the service secure, preventing abuse, measuring survey completion, and improving reliability. Our interest is a working, trustworthy product.
- Consent (Art. 6 (1) (a) GDPR): optional AI features that send survey text to a language-model provider, and any non-essential cookies if we introduce them later.
- Legal obligation (Art. 6 (1) (c) GDPR): retaining invoices or responding to lawful requests where applicable.
4. Processors and recipients
We use specialist providers to run Nice Forms. They process data only on our instructions:
- MongoDB: stores accounts, workspaces, surveys, answers, and visit analytics.
- Stripe: processes Pro subscription payments and stores the payment method you add at checkout.
- Resend: sends password-reset, welcome, invite, and contact emails.
- Cloudflare R2: stores survey and display images you upload.
- OpenAI: used only if you run AI survey generation or AI response summaries. The prompt then includes the text needed for that task.
- Hosting and infrastructure partners that deliver the website and API.
We do not sell personal data and we do not use advertising networks. We may disclose data if required by law or to protect users from abuse.
5. International transfers
Some providers may process data in the United States or other countries outside the EEA. Where that happens, we rely on an adequacy decision or on standard contractual clauses, together with additional safeguards where needed.
6. Retention
- Account, workspace, survey, and response data are kept until you delete them or ask us to delete the account.
- Contact-form messages are kept as long as needed to handle the request.
- Server logs are kept only as long as needed for security and operations, then deleted or anonymised.
- If you cancel Pro, surveys remain in the account on the Basic plan unless you delete them.
7. Your rights
You have the right to access, rectification, erasure, restriction, data portability, and to object to processing based on legitimate interests. Where processing is based on consent, you can withdraw consent at any time, without affecting processing that already took place.
To exercise these rights, email gettesoftware@gmail.com or use the contact form. We may need to verify that the request comes from you.
You also have the right to lodge a complaint with a supervisory authority, in particular in your EU/EEA member state of residence or the authority competent for us. Useful starting points: the German Federal Commissioner for Data Protection (BfDI) and the UK Information Commissioner’s Office.
8. Survey respondents
If you answer a survey, the survey owner decides which questions to ask and how long to keep the answers. Nice Forms stores the answers so the owner can view results, export CSV, and — on Pro — run an AI summary.
If a survey asks for your name or email at the end, that lead data is stored for the survey owner. You can skip lead capture unless the owner marked it as required.
Requests about respondent data should usually go to the organisation that published the survey. We will help where we are legally required to.
9. Cookies
We use essential cookies and similar storage as described in the cookie policy. We do not use advertising cookies.
10. Children
Nice Forms is not directed at children under 16. If you believe we have collected data from a child, contact us and we will delete it.
11. Changes
We may update this policy when the product or the law changes. The date at the top of this page is the latest version. Material changes will be reflected here before they take effect where required.