GlowForm Back to home

Privacy

This is a plain-language summary of what GlowForm does with data today. It is not yet our formal Privacy Policy, which SparkGap LLC will publish here before GlowForm is generally available.

GlowForm is operated by SparkGap LLC.

This website

  • When configured, we use Google Analytics to measure public-page visits and clicks on “Get a demo,” only after you allow analytics. Google’s tag is not loaded before you accept. Analytics cookies are configured to expire after 90 days. We do not enable advertising personalization.
  • Analytics excludes the signed-in app, authentication pages and shared forms. Page addresses sent to Analytics omit query strings and fragments. We do not send form inputs, credentials or chat messages.
  • Your analytics choice is kept in this browser for 180 days. You can change it through “Analytics preferences” in the footer. Declining stops analytics and removes this site’s Google Analytics cookies; it does not delete data already collected by Google.
  • Campaign links may include a short referral code. This browser keeps that code for up to 90 days and includes it when creating a workspace.
  • Its typefaces are loaded from Google Fonts, so your browser contacts Google to fetch them.
  • “Get a demo” opens a booking page with an embedded Calendly scheduler. Your browser contacts Calendly when that page loads. The scheduler carries campaign tags that say which button and campaign the visit came from, without your name or email. What you enter there is handled by Calendly under its own privacy policy and cookie controls. If you allow analytics, we record that a booking completed, without its personal details. If Calendly sends you back here after booking, the confirmation page reads the booking details out of the address bar and then removes them from it; they are not sent to Analytics.
  • The conversations, customers and figures shown on the home page are sample data. None of it describes a real person or company.

The product

  • Creating an account stores your email address, a hash of your password, and the workspace you create or join.
  • Signing in sets one cookie that keeps you signed in. It is not readable by scripts and is not used for tracking.
  • Actions taken in a workspace are written to that workspace’s audit log, which its members with the right permission can read.

AI and retention

When a workspace owner enables AI, messages and authorized tool results are sent to the configured OpenAI or Anthropic API. Connection credentials are not sent to the model.

The maintenance job removes inactive conversations and execution records after 90 days, and audit records after 365 days. Saved forms remain until deleted. These periods depend on the deployment running its daily maintenance job.

You can request account deletion from your account menu and cancel within seven days. The maintenance job then removes your personal workspaces, conversations, forms and login credentials. Shared workspace records retain an anonymous account identifier until their retention period ends. Encrypted backups expire according to the deployment’s backup policy; restored backups must have pending deletions reapplied before serving traffic.

Questions

Until the formal policy is published, the way to reach us is to book a time and ask.