Privacy
GoFormMint Privacy
GoFormMint is designed to keep form and analytics data inside the site owner's database unless integrations are intentionally configured.
Data stored by GoFormMint
GoFormMint stores form definitions, submission data, upload records, analytics events, daily stats, spam scores, spam reasons, payment records, license records, settings, email logs, webhook delivery logs, and admin audit events.
Visitor IP addresses and user agents are hashed where used for analytics, spam review, security checks, and audit context.
Submission data
Form submissions may include names, email addresses, phone numbers, messages, files, payment references, custom fields, campaign parameters, and any other data the site owner chooses to collect.
Site owners should add clear consent text to forms when collecting personal data and should avoid collecting sensitive data unless they have a valid business and legal reason.
Analytics data
GoFormMint records form views, submissions, conversion rates, UTM campaign values, spam counts, and daily trends. This helps site owners understand which forms and campaigns generate leads.
Analytics are intended for operational reporting and should be handled according to the site owner's privacy policy and retention rules.
Third-party sharing
GoFormMint sends data to external services only when those integrations are configured by the site owner.
- Resend may receive lead notification email content.
- Webhook endpoints may receive clean lead payloads.
- Stripe, Razorpay, and PayPal may receive checkout and payment data.
- Cloudflare Turnstile may receive verification data for spam and abuse protection.
Security and retention
GoFormMint includes CSRF protection, session hardening, installer lock handling, login throttling, upload validation, spam scoring, and configurable Turnstile checks. No software can promise absolute security, so production installs should also use HTTPS, strong passwords, restricted file permissions, regular backups, and hosting-level security controls.
Site owners should define how long submissions, uploads, payment logs, email logs, webhook logs, and analytics records are retained.
User requests
Because GoFormMint is installed and operated by the site owner, access, correction, export, and deletion requests should be handled by the site owner. GoFormMint provides local storage and exports to help with those requests.