Where data lives

This is a starter text for launch. Have your counsel review it and add the legal entity before you publish.

European Union

Submissions, accounts, and form settings live in Cloudflare D1. Create the database with EU jurisdiction: wrangler d1 create formgong --jurisdiction eu.

What is not stored

The raw IP address. Submissions keep a hash keyed with the server secret so bursts can be limited without identifying a person. Analytics events do not store an IP at all.

Cookies, a persistent identifier, and a browser fingerprint. The analytics script sets none of these, so it does not need a consent banner.

Raw gclid, fbclid, and msclkid values. Only the ad platform is kept.

Other services

Email: ZeptoMail (Zoho, EU data centre), from your verified domain.

Telegram: the Bot API, only after you open the bot link yourself.

Captcha: Cloudflare Turnstile, if you enable the widget.

AI lead scoring, when you turn it on: Vercel AI Gateway. The model provider is Liquid AI by default. All form fields, including email and phone, are sent, and this processing may happen outside the EU.

Attachments

When attachments are enabled, PDF, JPEG and PNG files are scanned by private ClamAV on a server operated by Formgong at Contabo and stored in private EU-jurisdiction Cloudflare R2. Only the signed-in form owner can download them. File bytes are not sent to the AI scoring provider. Files follow form retention and are deleted with submissions, forms or accounts; storage outages are retried and download access is revoked immediately.

Email: support@formgong.com