Plain-language privacy.

Last updated July 18, 2026.

Plumeform is a survey platform. Two kinds of people use it: creators (account holders who build surveys) and respondents (people who answer them). This page covers both, in that order, without legalese where we can avoid it.

If you have a Plumeform account

We store your email address, a hash of your password (or magic-link tokens), your workspace name and plan, the surveys you build, and the responses they collect. If you upgrade, payment is handled by Stripe— card numbers never touch our servers; we store only Stripe's customer and subscription identifiers. We use your email to send the account emails you'd expect (sign-in links, response notifications you turn on, weekly exports you schedule). We don't sell data or send marketing email you didn't ask for.

If you're answering a survey

Respondents never need an account, and we designed collection to be minimal:

We do not store your IP address with your response, and we set no advertising or cross-site trackers on survey pages.
A response contains your answers plus limited context: device class (mobile or desktop), a country code derived from network headers (never the address itself), how long questions took, and — if the survey link carried them — identifiers like a Prolific ID that the researcher uses for payment and duplicate prevention.
A small browser-storage flag may remember that you finished, when the creator enables “one response per browser.”
Identity (name, email) is collected only if the survey explicitly asks you for it as a question.

For survey content and answers, the survey's creator decides what is asked and how results are used — for questions about a specific survey, the creator is the right contact. Partial answers you abandon are deleted automatically after 30 days.

Who processes data on our behalf

Plumeform runs on a short list of infrastructure providers, each processing data only to provide the service: Supabase (database and authentication, hosted on AWS in the United States), Netlify (hosting and delivery), Stripe (payments), Resend (transactional email), and Anthropic (only when a creator uses an AI feature like survey drafting, translation, or open-text summaries — the relevant text is sent for that request and not used to train models). If a creator connects Google Sheets, responses to that survey are also written to their spreadsheet under their Google account. If we enable product analytics, it measures page usage in aggregate and is never joined to survey responses.

Retention and deletion

Creators can delete any survey (responses included) or their whole account at any time — deletion is immediate and permanent, not a soft-delete. Responses live until the survey's creator deletes them. Abandoned partial responses purge after 30 days. If you responded anonymously, be aware we usually cannotfind “your” row afterward — that's the honest cost of not tracking you.

Your rights

Wherever you are, we honor access, correction, export, and deletion requests for data we control: creators can self-serve most of this from the dashboard (CSV/XLSX export, delete buttons), and anyone can email hello@plumeform.com for the rest. For respondent data inside a survey, we'll route you to the survey's creator, who controls it.

Changes

If this policy changes materially, we'll note it here with a new date, and email account holders about anything that reduces their protections. Questions: hello@plumeform.com. See also our terms of service.