Privacy policy
Last updated October 20, 2026
Formfile helps people collect files through Google Forms. This page explains what we store and why.
If you own a form
- Your Google account: your name, email address and profile picture from Google sign-in, and an encrypted Google refresh token so Formfile can save files to your Drive.
- Google Drive access: only the drive.file scope. Formfile can create folders and files in your Drive and manage those, and nothing else. It cannot list or read your other files.
- Your forms: the public link of each form you connect, a copy of its questions (re-read from Google regularly), and your Formfile settings.
- Billing: handled by Stripe. We keep your Stripe customer and subscription IDs, never your card details.
If you fill in a form
- Your files stream through Formfile into the form owner's Google Drive. Formfile doesn't keep a copy. We store each file's name, size, type and Drive ID so the owner can find it and so we can remove uploads that were never submitted (after 24 hours).
- Your answers pass through Formfile on their way to Google Forms and are not stored by Formfile.
- To limit abuse we count requests per IP address in memory for an hour; IP addresses aren't written to our database.
The form owner controls the data you send them. To change or delete a response, contact the person or organization that sent you the form.
What we don't do
We don't sell data, show ads, or use files or answers for anything other than delivering them to the form owner. Data from Google APIs is used only to provide Formfile's features and follows the Google API Services User Data Policy, including its Limited Use requirements.
Cookies
One cookie keeps you signed in, and a short-lived one protects the Google sign-in. No advertising or tracking cookies. Page visits are counted without cookies.
Keeping and deleting data
You can delete a connected form or your whole account at any time from your account page. Deleting your account removes your forms, settings and stored token from Formfile; files already in your Drive stay there, because they're yours. You can also revoke Formfile's access in your Google account under Security, then Third-party access.