Privacy policy

Last updated: 1 October 2026. SpaceForms is operated by Alice Labs AB, Sweden, which is the data controller.

What we collect

• Account data: email, name and login details when you sign up.
• Form content: the forms you build and the prompts you write to create them.
• Responses: answers respondents submit. These belong to the form owner.
• Usage data: pages viewed and actions taken, used to improve the product.
• Payment data: handled by Stripe; we never see full card numbers.

Forms created by AI assistants (ChatGPT, MCP, API)

When an AI assistant creates a form for you without an account, we store the form and a hashed, single-use claim link that expires after 30 days. The prompt is sent to our AI form builder to write the questions.

Preventing spam, phishing, fraud and abuse

To stop forms from being used for phishing or spam, we process technical information: a hashed (pseudonymised) IP address and network range, a hashed browser/user-agent signature, timestamps, and the form's text, which is checked by an automated safety review before publishing. We do not store full IP addresses for this purpose. These abuse logs are deleted automatically after 90 days. Blocked forms are kept so we can review them and report them.

Who we share data with

Hosting and database providers, AI model providers (to generate forms and run safety reviews), Stripe (payments) and our email provider. We do not sell personal data.

Your rights

Under GDPR you can ask to access, correct, export or delete your data. Deleted forms are kept in trash for 30 days, then removed permanently.

Contact

Questions: [email protected] (Alice Labs AB, Sweden). General support: [email protected]