- Our servers never receive what a patient writes in your form.
- Completed forms go to Google Workspace, covered by Google's BAA.
- Connecting Google Drive gives us access only to the files we create.
- No advertising or tracking cookies.
What we collect about your practice
Your work email address, used to sign you in and to send you messages about your forms. If you sign in with Google, we receive only your email address and a Google account identifier. Signing in gives us no access to your Google Drive or any other Google data.
The blank form you upload. It must not contain patient information. If we find patient information in an upload, we delete the file immediately without using it and tell you.
Your time zone, read from your browser, so we can show deadlines in your local time.
Your card
Your card details are entered in a form provided by Stripe, our payment provider, and are stored by Stripe. They never reach our servers. We keep only the identifiers Stripe gives us to charge the subscription you agreed to.
Your patients' information
When a patient completes one of your forms, the signed document is created on the patient's device and sent directly to Google Workspace, where it is stored in a folder shared with your practice. Google Workspace is covered by Google's Business Associate Agreement.
Our own servers never receive the content of a completed form. They receive only a count: which form was used, and when. The pages of your form are served without keeping visitors' IP addresses.
We sign a Business Associate Agreement with your practice before your form is used with patients.
Proof at signature
If your practice turns on photo uploads, photo at signature or location at signature, the patient's device asks for permission first. Photos and location travel with the signed form to your practice's Google Workspace, like every other answer, and never reach our own servers. A patient who declines can still sign, unless your practice requires it.
If you connect your Google Drive
You can choose to have signed forms saved in your practice's own Google Drive. Google then asks you to allow access to the files our service creates in your Drive, and only those: we cannot see or change anything else in your Drive.
The access key that Google issues is kept inside Google Workspace, in the script that files your forms, and never on our own servers. Our servers only record that your Drive is connected and which Google account you used.
We use this access only to create your forms' folder and spreadsheet and to save your patients' completed forms there. We do not use it for advertising, we do not sell it, and no one on our side reads it unless you ask us to fix a problem. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
You can disconnect at any time from your account page or from your Google account settings. New forms then go back to our secure folder shared with your practice.
How long we keep things
Your uploaded blank form is kept while we build and maintain your form. If a form is deleted, we first share its folder of patient records with your practice email. We never delete your patient records.
Cookies
We use one cookie to keep you signed in, and a short-lived cookie during Google sign-in. We do not use advertising or tracking cookies.
Contact
Reply to any email you received from us.