Privacy notice — preview

Last updated: 2 November 2026. This preview service is not yet open to general public registration.

What is stored

FormRelay stores account email addresses, form names, access keys, session and login-token hashes, and submission timestamps and delivery statuses in PostgreSQL. Form message content is forwarded to the form owner's email and is not stored in the FormRelay submissions table. The email provider processes outgoing email, including submission fields.

Providers

Application hosting: Render. Database: Neon. Email delivery: Resend. These providers may process information necessary to provide their services.

Retention and security

Session tokens expire after seven days; login links expire after 15 minutes. Submission metadata currently remains in the database until a retention policy is implemented. Do not submit sensitive personal, health, payment-card, or credential information through this preview.

Requests

During this preview, contact the project operator using the same channel through which you received access to request account-data review or deletion. A public privacy contact and verified deletion workflow are required before general launch.