Submito← Back to home

Privacy Policy

Submito Privacy Policy

Effective Date: March 9, 2026

Submito is operated by Ishak Technologies LLC.

1. Information We Collect

Account Information

  • Name
  • Email address
  • Billing information

Form Submission Data

  • Full form content submitted by customers

Usage Data

  • IP address
  • Browser/device information
  • API usage logs

Marketing Data

  • Newsletter signups
  • Waitlist registrations
  • Contact form submissions

Analytics & Tracking Technologies

We use:

  • Vercel Analytics
  • PostHog
  • Facebook Pixel
  • Google Analytics

2. How We Use Data

We use information to:

  • Provide and maintain the Service
  • Process payments
  • Enforce quotas
  • Improve performance
  • Send marketing communications
  • Ensure security and prevent abuse

3. Third-Party Processors

We may use:

  • Vercel (hosting)
  • Hostinger (hosting)
  • AWS (infrastructure and email delivery)
  • Stripe (payment processing)
  • Appwrite (database and authentication)
  • Upstash (caching)
  • Sentry (error monitoring)
  • PostHog (analytics)

These providers may process personal data on our behalf.

4. User Account Controls & Rights

Users may:

  • Access and update account information through the dashboard
  • Delete their account at any time via the dashboard — this permanently and immediately deletes all associated data including forms, workspaces, and submissions
  • Export their data — available to Basic and Pro plan users via the dashboard. Free plan users may request a copy of their data by contacting support@submito.dev; we will respond within 30 days

Upon verified request, we will delete or anonymize personal data unless retention is required for legal or security reasons.

For data submitted through customer forms, Submito acts solely as a Data Processor. Individuals must contact the respective website owner (Submito customer) for access or deletion requests related to form submissions.

5. Data Retention

We retain data:

  • While accounts are active
  • Submissions and form data are stored until account deletion — there is no automatic deletion
  • Upon account deletion, all personal data stored by Submito is permanently deleted
  • Stripe billing and payment records are retained for legal and tax compliance purposes even after account deletion, as required by applicable law
  • AWS email delivery logs are retained per AWS's standard data retention policies
  • As otherwise required for legal compliance or security

6. Data Breach Notification

In the event of a personal data breach, we will notify affected users and relevant authorities within 72 hours of becoming aware of the breach, as required by applicable law.

7. International Transfers

Data may be processed in the United States or other jurisdictions where our providers operate.

8. Security

We implement reasonable technical and organizational safeguards to protect personal data.

9. Updates

We may update this Privacy Policy. Continued use indicates acceptance.