Privacy Policy

This page describes how FieldForms collects, uses, and protects personal information, in line with South Africa's Protection of Personal Information Act (POPIA), built to a GDPR-shaped ceiling.

Data we collect

• Account details: name, email address, and role.
• Form submission data your organisation's forms are configured to capture — which may include photos, GPS location, and signatures.
• Device diagnostics from the mobile app, used to support offline sync and troubleshoot connectivity issues.

Mobile app permissions

The FieldForms mobile app requests the following device permissions, only when a form your organisation built requires them:

• Camera: to capture photo and signature fields.
• Location: to capture GPS coordinates for location fields.
• Storage: to queue captured data and files for sync while offline.

How we use your data

Submission data is used solely to provide the service your organisation has configured — storing submissions, generating documents, and delivering webhooks/integrations your organisation has set up. We do not sell personal data.

Retention

Submission data is retained indefinitely by default. A tenant administrator may configure a retention period per form (or organisation-wide), after which expired submissions are automatically and permanently deleted, including any personal-data copies held in webhook or integration delivery logs.

Your rights

Organisation administrators can export a full copy of their organisation's data, or request deletion of specific submissions, at any time from account settings.

Third parties

We use PayFast to process subscription payments. If your organisation configures webhooks or integrations, submission data is sent to the destinations your organisation has configured — that delivery is your organisation's responsibility.

Contact

For data protection queries, noreply@fieldforms.test.