PushForm1. Who we are
PushForm is owned and operated by JobCraft, Inc., a small Delaware corporation based in Oregon, United States. This policy covers the PushForm website, applications, account services and support. For privacy questions or requests, email privacy@pushform.io.
2. Information processed by PushForm
- Account information: your email address, account identifier and authentication/session information used to sign you in.
- Billing information: Stripe customer and subscription references, subscription status, billing interval and billing-period dates used to display and manage your subscription.
- Your work: files you upload or save, project and folder names, document names, revisions and related metadata such as size, timestamps and integrity checks. Cloud autosave sends document content to our storage service.
- Import diagnostics: import reports can include filenames, file sizes, source software versions, timestamps, content counts, conversion limitations, errors and the PushForm build used.
- Support communications: messages, contact details, attachments and other information you choose to send us.
- Technical information: requests to our website and service providers can expose IP addresses, browser/device details and request information needed to deliver, secure and troubleshoot the service.
Please avoid including sensitive personal information in model names, files or support attachments unless necessary for your request.
3. How information is used
We use information to authenticate accounts, manage subscriptions and billing, store and retrieve your work, maintain revisions and recovery, answer support requests, diagnose problems, prevent misuse and meet legal obligations. Information submitted for a particular feature is processed to provide that feature.
4. Private files and public publishing
Private files remain private forever unless you explicitly publish them. Ending or changing a subscription never makes them public. Saving, importing or using Community Edition does not authorize us to publish an existing private file.
Private means your file is not publicly available. Service providers may process it to operate the service, and limited access may be necessary for support, security or legal requirements described here. This promise concerns visibility; it does not promise indefinite storage of deleted files or continued access to a discontinued service.
If you explicitly publish work, the published content and information you include may be accessible to others. Published files are shared under the terms described in the Terms of Use. Downloaded or redistributed copies may remain outside our control. Public publishing features may not yet be available in your build.
5. Service providers and other disclosures
We use service providers for hosting, infrastructure, authentication, storage and communications. PushForm uses Supabase for account authentication and cloud file storage, and Resend to send email such as file export links. These providers process information needed to perform their services.
Stripe processes subscription payments through its hosted checkout and billing portal. We send Stripe your account email address and internal account identifier to connect billing to your account. Stripe collects the payment and billing details you provide there; PushForm does not store full payment-card numbers. See Stripe’s Privacy Policy for its processing and retention practices. Payment records held by Stripe may remain after your PushForm account is deleted.
This website loads fonts from Google Fonts. Your browser connects to Google to retrieve them, which exposes technical request information such as your IP address. See Google's Privacy Policy and Supabase's Privacy Policy for their practices.
We may disclose information when reasonably necessary to comply with law or legal process, address fraud or security incidents, or protect rights and safety. If the business is reorganized or transferred, information may transfer with it, subject to applicable law and the commitments in this policy.
6. Browser storage and cookies
The app uses browser storage to maintain sign-in sessions, preferences, recovery drafts and workspace state. Clearing site data can remove local recovery information and sign you out. Blocking required storage can prevent parts of the app from working. A local copy or recovery draft is separate from a successful cloud save.
We use PostHog to measure website traffic and actions such as opening PushForm in the browser, clicking an installer download, and using the sharing controls. Analytics include page paths, referring domains, browser and device information, and these actions. PostHog uses cookieless tracking without its own cookies or browser storage, and PostHog processes technical request information to derive a temporary visitor identifier. Client IP addresses are discarded from analytics events. We do not send account identities, document contents, or raw URL query strings and fragments in these events, and we do not record browsing sessions. Analytics are disabled when your browser sends Do Not Track or Global Privacy Control.
Separately, the website remembers approved campaign codes from links you follow, along with their visit times, in this browser for a rolling 30-day window. This lets us distinguish the first campaign visit from later visits. Only predefined source, medium, campaign and content codes are accepted; other query values are ignored. These codes and the first visit time may accompany website analytics events. This history contains no account or visitor identifier, can be associated privately with your account when you open the web app, sign in and have saved an affirmative app analytics choice. A random handoff token expires after one hour; your account identity is never sent to PostHog. Desktop use of the same account can use this saved source; a direct installer download does not transfer campaign history. Expired touches are excluded immediately and removed from storage the next time the site runs. Turning off the preference below clears the history; your opt-out preference remains in this browser until you change it or clear site data. Do Not Track and Global Privacy Control also disable this capture and clear its history when you visit.
Campaign history requires browser storage. You can also disable it with Do Not Track or Global Privacy Control.
The PushForm app also offers optional anonymous product analytics through PostHog. The profile form’s “Help improve PushForm” checkbox starts checked when you have not saved a choice; analytics starts only after a successful submission with the box checked. Existing accounts with no saved choice are excluded. You can change the saved choice in your account details. These events measure sessions, Home visits, document open/create/close activity, tool groups and AI Help use, with app version and whether you use web or desktop. They exclude account identities, document contents and names, command arguments, and chat messages. They use the same cookieless approach and browser privacy signals described above.
With the saved “Help improve PushForm” choice enabled, PushForm also records private account measurements of project starts, design edits, successful saves, closing and reopening saved work. These use internal document and saved-version identifiers to measure project completion; they contain no design contents, file names, paths or chat messages, and are not sent to PostHog. Pending measurements may be kept in browser storage while offline and are removed after delivery or when the saved choice is turned off. Do Not Track and Global Privacy Control also stop these measurements. Local working-copy checkpoints and cloud saves are distinguished. The seven-day activation window measures use and does not limit access to the unlimited free version.
7. Retention and security
We retain information as needed to provide the service, maintain account and file history, resolve disputes, protect security and meet legal obligations. Retention depends on the information and purpose; this policy does not establish a fixed deletion period. Deletion requests may require handling of revisions, backups and legally required records.
When you delete your account, we delete your saved files and their revisions, your projects and folders, import reports, profile and feature requests, and then your account, 48 hours after you confirm. You can cancel until then. Information already sent elsewhere, such as feature requests filed with our issue tracker, and records we keep for security or legal reasons, such as audit logs, may remain. Copies in our service providers' backups are removed as those backups expire.
We use access controls and other safeguards designed to protect information. No online service or storage system can guarantee absolute security. Keep independent copies of important work and protect access to your email account.
8. Your choices and requests
You can export a copy of your saved files, and delete your account, yourself from your account details in PushForm. Contact privacy@pushform.io to request access, correction, a copy, deletion of personal information, or account closure. We may verify your identity before acting. Depending on where you live and which laws apply, you may also have rights to restrict or object to processing, withdraw consent, appeal a decision or complain to a privacy authority. We handle requests and appeals according to applicable law.
If we decline a request, you can ask us to reconsider by replying or emailing with the subject "Privacy appeal." Oregon residents can also contact the Oregon Department of Justice. This policy does not limit rights available under applicable law.
9. International use and children
JobCraft, Inc. is based in the United States. Information may be processed in the United States and other locations used by service providers, where privacy laws may differ from those where you live.
PushForm is not intended for children under 13. If you believe a child under 13 has provided personal information, contact us so we can investigate and address it.
10. Open-source software and public contributions
Publishing the PushForm application source does not publish your account information, private files or designs. This policy describes the services operated by JobCraft; independently operated copies or forks may have different operators and privacy practices.
If you choose to post an issue, discussion or contribution in our public project repository, the information you submit and your public profile may be visible to others under that platform's policies. Do not include private designs, credentials or customer information in public contributions. Contact support privately about account or private-file problems.
11. Changes and contact
We will post updates on this page and change its effective date. Material changes will receive additional notice where required by law. Changes do not authorize automatic publication of private files.
Privacy contact: JobCraft, Inc., Oregon, United States. Email privacy@pushform.io.