Your privacy matters to us. This policy explains what information Qubeforms processes, why we use it, and how you can exercise your choices. For related information, read our Terms of Service, security overview, and export and retention guide.
1. Who we are and what this policy covers
Qubeforms is operated and billed by Qubus Labs, LLC. In this policy, "we", "us", and "our" refer to Qubus Labs, LLC. This policy explains how we handle personal information through our website, accounts, billing portal, APIs, and form services. We determine how account, billing, and support information is used to run our business. When a customer uses Qubeforms to collect submissions, that customer generally determines why the information is collected and how it is used, and we process it on their behalf to provide the service. If you submitted a form on another website, also review that website's privacy notice.
2. Account, billing, and support information
We collect information you provide when registering, managing your profile or subscription, or contacting us. This may include your name, email address, account identifiers, billing details, subscription status, transaction records, and support messages. Qubus Labs, LLC bills for Qubeforms, and payment providers process payment information to complete transactions. Account and billing information is handled through our connected billing portal and synchronized where needed to provide access to Qubeforms. You may decline to provide information, but we may be unable to create an account, complete a purchase, or provide the requested service without it.
3. Form submissions and business data
We process the fields and files sent to customer forms, including names, email addresses, messages, and any other information a form owner chooses to collect. Features a customer enables may also process saved drafts, consent fields, privacy-notice references, team notes, and delivery destinations. We store, display, search, route, and deliver this information according to the form configuration and authorized account actions. Account owners and team members with appropriate permissions can access submissions. Customers are responsible for the information they request, their privacy notices and legal basis for collecting it, and their handling of exported or delivered copies.
4. Technical information and abuse prevention
When you visit the website or use a form endpoint, we process technical information such as your IP address, browser or user-agent information, request time, source origin, and delivery or error status. For submission abuse controls, we store keyed hashes derived from IP addresses and other request signals instead of raw IP addresses in submission records. These identifiers help detect repeated requests, enforce limits, and prevent spam; they are pseudonymous identifiers, not necessarily anonymous data. Hosting, network, or security providers may separately process IP addresses in their operational records. Spam checks can score, quarantine, or reject submissions based on form settings and security signals. If you believe a legitimate submission was blocked, contact the form owner or our support team.
5. How we use information
We use personal information to provide and maintain Qubeforms, authenticate users, manage subscriptions and payments, store and deliver submissions, respond to inquiries, and send account, security, or service notices. We also use operational information to troubleshoot problems, improve reliability and usability, prevent fraud and abuse, resolve disputes, and meet legal obligations. We do not sell personal information or use form submission contents for advertising. We do not publish identifiable customer submissions for marketing or public relations purposes.
6. Legal grounds for processing
Where applicable data protection law requires a legal basis, we process account and service information as necessary to perform our agreement with you, meet legal obligations, or pursue legitimate interests such as securing, administering, and improving the service, subject to your rights. Where processing requires consent, we seek that consent and you may withdraw it without affecting the lawfulness of earlier processing. For customer form submissions, the customer is responsible for establishing an appropriate legal basis, and we process the information on their behalf. If your use requires a data processing agreement or specific contractual safeguards, contact us to arrange them before submitting that data.
7. When information is shared
We share information as needed with providers supporting hosting, private file storage, email delivery, payment processing, and security or spam prevention. Authorized staff may access information when needed to operate the service, investigate an issue, or respond to a request. Form data is also sent to recipients and integrations configured by the customer, such as verified notification email addresses and webhooks. We may disclose information where required by law or reasonably necessary to investigate fraud, protect people or the service, or establish, exercise, or defend legal claims. We may also share information at your direction. Third-party services you choose to connect may have their own privacy policies and responsibilities.
8. Cookies and browser storage
Qubeforms and its billing portal use cookies to maintain sessions, authenticate users, and support account security and service functions. The website also uses browser local storage to remember a selected pricing plan. You can remove stored information or block cookies through your browser settings, although doing so may prevent sign-in, checkout, or other features from working correctly. Third-party resources or widgets may process information under their own policies. Where a use of cookies or similar technology requires consent, we will request it before that use.
9. CAPTCHA and external website resources
Our contact form uses Cloudflare Turnstile for spam protection. Customer forms may use Turnstile, hCaptcha, or Google reCAPTCHA when the form owner enables them. These services can receive network and browser information, and server-side verification sends the challenge token and submitting IP address to the selected provider. Our website also loads fonts, styles, and scripts from external providers, including Google Fonts and content delivery networks. Your browser connects to those providers to retrieve the resources, which exposes technical information such as your IP address. Their privacy policies explain how they handle information they receive.
10. International processing
Information may be processed in countries other than the one where you live, depending on the infrastructure, providers, and integrations used. Those countries may have different data protection laws. Where applicable law restricts an international transfer, the transfer must be supported by the required legal mechanism and safeguards. Contact us for information about processing locations or transfer arrangements relevant to your account before using Qubeforms for data with specific location or transfer requirements.
11. Retention and deletion
Submissions and associated attachments receive an expiration based on the form's retention setting when they are received. Plan retention defaults and maximums are 30 days on Free, 90 days on Starter, and 365 days on Pro and Business; a form may use a shorter period. Scheduled cleanup removes expired records and associated stored files. Saved drafts have a separate, shorter expiration. The dashboard Delete action removes a submission from ordinary inbox access; it does not immediately erase every stored copy. Contact us for a specific erasure request or account closure. Canceling a subscription does not itself erase form data. We retain account, billing, support, and security records for as long as needed for their purpose, including legal, accounting, dispute-resolution, and abuse-prevention obligations. Backups and operational records may remain until their applicable retention cycles end. Deleting information from Qubeforms does not delete copies already delivered to customer email addresses, webhooks, or other external destinations.
12. Security
We use safeguards designed to protect personal information, including encrypted connections, encryption of stored form payloads, access controls, verified notification recipients, scoped credentials, and private attachment storage with time-limited links. These measures reduce risk, but no method of electronic transmission or storage is completely secure. Protect your credentials and API secrets, limit access to your account, and avoid collecting information you do not need. Please do not send passwords, payment-card details, or unnecessary personal information in a privacy or support request.
13. Your choices and privacy rights
You can review and update available profile information through your account, export submissions through supported tools, and request account closure or data deletion by contacting us. Depending on applicable law, you may have rights to access, correct, delete, or obtain a portable copy of your personal information, restrict or object to processing, withdraw consent, or complain to a data protection authority. These rights may be subject to legal exceptions. We may need proportionate information to verify your identity and authority before fulfilling a request, and we will respond within the period required by applicable law. If your information was submitted to another organization's form, contact that organization first; we can assist it with requests relating to information we process on its behalf.
14. Children's privacy
Qubeforms is not directed to children under 13, and we do not knowingly collect their personal information for our own account or marketing purposes. Customers must ensure that their forms and collection practices comply with applicable requirements concerning children's information. If you believe a child has provided personal information inappropriately through Qubeforms, contact us and, where relevant, the form owner. We will investigate and take appropriate steps, including deletion where required by law.
15. Business transfers
If Qubus Labs, LLC or the Qubeforms business is involved in a merger, acquisition, asset sale, reorganization, or bankruptcy, personal information may be disclosed or transferred as part of that transaction, subject to applicable law and appropriate confidentiality protections. We will provide notice where required and require that transferred information remain subject to this policy unless a lawful change is made with any required notice or consent.
16. Changes to this policy
We may update this policy to reflect changes to Qubeforms, our practices, or legal requirements. We will update the date on this page and provide notice of material changes through the service or your account email as appropriate or required by law. Where a change requires consent, we will seek it before applying the new use. Continued use of Qubeforms does not replace consent where consent is legally required.
17. Contact
For privacy questions, access or erasure requests, or concerns about personal information, contact Qubus Labs, LLC, the operator of Qubeforms, at privacy@qubeforms.com. You can also reach us through our contact page.