Everyday FormsEveryday Forms · 🍁 Made in Canada by Canadians · Everyday Forms · 🍁 Made in Canada by Canadians · Privacy Policy
Everyday Forms ("we", "our", or "us") is operated by Dishuu, based in Carleton Place, Ontario, Canada. This Privacy Policy explains how we collect, use, and protect your information when you use our platform at forms.dishuu.com or our mobile application.
1. Information We Collect
From creators (people who build forms)
- Email address — used to send a one-time login code (OTP). We never store passwords.
- Form content — titles, descriptions, questions, and settings you create.
- Session data — a secure token stored in your browser or device to keep you signed in.
From responders (people who fill out forms)
- Email address — required to submit a form. Used to prevent duplicate submissions.
- Form answers — the responses you provide to form questions.
- Submission metadata — collected automatically and includes:
- Browser family and version (e.g. Chrome, Firefox)
- Operating system (e.g. iOS, Android, Windows)
- Device type (e.g. mobile, desktop)
- Timezone and language preferences
- Referrer URL (the page you came from, if any)
- IP address stored as a salted hash — the raw IP is never saved
- Time taken to complete the form
2. How We Use Your Information
- To authenticate creators via OTP email login
- To deliver form responses to the creator who owns the form
- To prevent duplicate submissions per form
- To display aggregate platform analytics to our internal team (not shared with creators)
- To operate, maintain, and improve the platform
We do not sell your data. We do not use your data for advertising. Submission metadata is used only for internal platform analysis.
3. Data Storage and Security
All data is stored on servers hosted in Canada. We use HTTPS for all data in transit. Passwords are never stored — authentication uses one-time codes only. IP addresses are stored only as salted cryptographic hashes and cannot be reversed.
4. Data Retention
- Form and submission data is retained indefinitely unless you delete your forms.
- Deleted forms are soft-deleted — data is retained in our database but is no longer accessible to you or responders.
- OTP codes expire after 15 minutes. Sessions expire after 30 days (web) or 24 hours / 30 days (mobile access/refresh tokens).
5. Your Rights
You may request deletion of your account and associated data by emailing us at [email protected]. We will process deletion requests within 30 days.
If you are a resident of Canada, you have rights under PIPEDA. If you are in the European Economic Area, you have rights under GDPR. If you are in California, you have rights under CCPA. Contact us to exercise any of these rights.
6. Cookies
We use a single HTTP-only session cookie to keep creators signed in. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.
7. Third-Party Services
We use the following third-party infrastructure:
- Cloudflare — DNS, TLS, and DDoS protection. Cloudflare may log request metadata per their own privacy policy.
- Zoho Mail — used to send OTP emails. Your email address is transmitted to Zoho for delivery only.
8. Children
Everyday Forms is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has submitted data, contact us and we will delete it.
9. Changes to This Policy
We may update this policy from time to time. We will update the "Last updated" date at the top of this page. Continued use of the platform after changes constitutes acceptance.
10. Contact
For privacy questions or data deletion requests:
Dishuu
Carleton Place, Ontario, Canada
[email protected]
