Home
DATA & PRIVACY
Your workflow.
Your connected services.
This notice explains how Optiform handles data in its website, plugin, connected workspaces, and recipient pages.
On this website
The landing page does not include advertising, analytics trackers, or third-party video embeds. Cloudflare processes requests to serve the site and protect it against abuse. Visiting the site does not unlock workspace data.
Inside a connected workspace
Optiform stores workflow definitions and templates, schedules and their saved input, form mappings, submitted fields, staged Sheet mappings and row values, task decisions, run history, and delivery records in its Cloudflare database. Reusable templates, generated documents, and collected signature images are stored through the connected Google Drive account. For an explicit Google Sheet range, Optiform can read mapped cells and write run IDs, statuses, and errors into reserved result columns. It does not automatically poll for new Sheet rows. Authorized Gmail delivery sends messages and attachments through that account.
ChatGPT can read and change workspace information through the actions you authorize. Your OpenAI and Google account settings and terms also apply. New workspaces use separate Cloudflare SQLite storage. Team members share workspace data and shared Google connections; member-private Google connections are available only to their owner. The original workspace remains in its existing database.
Access and signatures
Google refresh credentials, external webhook URLs and credential headers, webhook signing secrets, and submitted signature intent are encrypted before storage. Private task and signature collection credentials are protected at rest. Private links let designated recipients review a task, revisit its status, or draw a signature and consent to the exact purpose shown. Status views contain only the linked recipient’s tasks and do not expose another participant or the submitted form data. Collected images are saved in the connected workspace Drive’s Signatures folder. Possession of a private link is the identity evidence; Optiform does not independently verify the recipient email or provide a certificate-backed digital signature.
When a document template maps a form file field to an image placeholder, Optiform reads only the supplied private Drive file reference, validates the PNG or JPEG, and inserts it into the generated document. The source content hash and file reference are recorded with the output; image bytes are processed for generation and are not made public. A webhook step sends its reviewed JSON payload to the workspace’s saved HTTPS destination. Optiform records the delivery result but ignores and does not store the response body.
A workspace member can list collected signatures without seeing private tokens or pen strokes, insert a collected image into a new document only for its approved purpose, and revoke future collection or reuse. Revocation does not erase an existing Drive image or change documents already generated with it. Reusing an image does not mean the signer reviewed or signed the new document.
Signing in with Google provides a verified email, Google account identifier, name and, for managed accounts, a hosted-domain claim. Optiform stores these account details, workspace memberships, the Business workspace domain derived from its owner's managed Google identity, invitation email addresses, delivery status, access-change records and hashed session credentials. Browser sessions use secure, HttpOnly cookies and expire after seven days. Invitation links expire after seven days and can only be accepted by their exact invited email. Business invitations are restricted to the workspace domain and its subdomains; sharing that domain does not grant access automatically. If the workspace has Gmail permission, an owner or admin can send the invitation through that connected account. Owners can transfer ownership, and owners or admins can remove members in Team. You can sign out and revoke your own ChatGPT connections in Connections. Revoking ChatGPT does not disconnect Google or delete existing documents, signature files, or run records.
Billing
Dodo Payments is the merchant of record. When checkout is available, Dodo receives payment and billing details and handles taxes, invoices, and refunds. Optiform stores provider customer, checkout, subscription, refund, and verified event references needed to reconcile plan access. It does not store card numbers or raw billing webhook payloads. Test purchases do not grant paid access.
Retention and requests
Workflow data, signature records, and Google Drive files remain until removed through an authorized operation or by the service operator. There is no public self-service account deletion page in this release. Contact the workspace owner or use the support page for access, correction, or deletion requests. Removing Optiform access does not automatically remove files already stored in Google Drive or data held by connected services.
Updated October 25, 2026. Optiform is independent of OpenAI, Google, Cloudflare, and Dodo Payments. Read the terms of service.