Export and retention
Export Qubeforms submissions to CSV and download private attachments separately. Understand export limits, data retention deadlines, and permanent submission deletion.
1. Export a folder
Open Submissions, select your form and Inbox, Spam, or Archived, then select Export CSV. The export includes that status for the form, not just checked rows or the visible page. Owners and shared inbox Viewers and Triage members can export. Export separate folders if you need more than one status.
2. Understand the CSV contents and limit
The CSV contains submission ID, status, receipt time, and submitted field columns. Nested values are JSON-encoded; spreadsheet formula-like values are protected when exported. File bytes and full delivery history are not included. Synchronous exports default to a maximum of 250 records; larger folders return HTTP 413. Selecting fewer checkboxes does not narrow an export. For larger collections, ask the owner to arrange a server-side export using List submissions and Get a submission.
3. Save attachment files separately
Use the submission read API’s uploads[].download_url links to download attachments into your own private storage before retention expires. Read-API links last 15 minutes; request the record again for fresh links. Notification attachment links last seven days. Saving a signed URL does not preserve the file or extend its retention.
4. Plan for retention deadlines
Default retention is 30 days on Free, 90 days on Starter, and 365 days on Pro and Business. A form can have a shorter deadline. Submissions and their attachments receive an expiration at receipt, and scheduled cleanup removes expired data. Archiving, generating a download link, or changing plans does not renew an existing record’s expiration. Export early enough to verify your copy before cleanup.
5. Understand deletion
Delete removes the record from ordinary inbox access; its detail API returns 404. It is a status change rather than a promise of immediate physical erasure of every stored copy. There is no dashboard Deleted folder. Deleting accepted records does not restore monthly submission quota. For account closure or a specific data removal request, contact support through the site; subscription cancellation alone is not data deletion.
Public form keys can appear in browser code. Read keys, management credentials, and webhook signing secrets must stay on the server.