Draft. Fill in the highlighted details in lib/legal.ts and have the text reviewed. Until then these pages aren't indexed or linked.
Legal
Your data & rights
What you can do with your data, what you can do yourself in the dashboard, and how to ask us for the rest.
Effective 28 September 2026
In short
- You can export submissions and contacts as CSV and delete data yourself, at any time.
- You can change your email or delete your account yourself in Account settings. For a full copy of your data, email us and we'll send it within 30 days.
- If you filled in someone's form, contact that website's owner first. We'll help them respond.
Your rights
Depending on where you live, for example under the GDPR, the UK GDPR or California privacy law, you have the right to:
- Access the personal data we hold about you, and get a copy.
- Correct data that's wrong or incomplete.
- Delete your data ("the right to be forgotten").
- Export your data in a common, machine-readable format.
- Restrict or object to how we use your data.
- Complain to your local data protection authority.
We don't sell or share personal data for advertising, so there's nothing to opt out of.
What you can do yourself
If you have a SiteBackend account, you don't need to ask us for most things:
| What | Where in the dashboard |
|---|---|
| Export a form's submissions (CSV) | Open the form, then Export CSV |
| Export a site's contacts (CSV) | The site's Contacts page, then Export CSV |
| Delete a submission | Open the submission, then Delete |
| Delete a contact or a note | The contact's page |
| Delete a form or a site, with all their submissions and files | The form's or site's Settings, under Danger zone |
| Delete a workspace and everything in it | Workspace settings, under Danger zone (owner only, and you need another workspace to move to) |
| Change your name, email or password | Account settings |
| See and end your sign-in sessions | Account settings |
| Approve, edit, archive or delete testimonials | The site's Testimonials tab |
| Delete your account | Account settings, under Delete account |
Deleting submissions, testimonials, forms, sites or workspaces also deletes their uploaded files and photos from storage. It can't be undone.
Deleting your account also deletes every workspace that only you are in, with everything in it, and removes you from workspaces you share. If you own a workspace that others are in, delete that workspace first. If a workspace that would be deleted has an active Pro subscription, cancel it first under Plans & billing.
What to ask us for
Email [privacy email] from the address on your account for:
- A full copy of the personal data we hold about you.
- Help deleting your account, for example if you can no longer sign in.
- Anything else in the list of rights above.
We'll reply within 30 days. We may ask you to confirm your identity first, so we never hand your data to someone else.
If you filled in a form
If you sent a message through a form on someone else's website that uses SiteBackend, that website's owner controls your data and decides what happens to it. We store and deliver it for them.
To see, correct or delete what you sent, contact that website's owner first. If you can't reach them, email [privacy email] with the website's address and roughly when you submitted. We'll pass your request on and help the owner respond.
Contact
Privacy and data requests: [privacy email]. Post: [company legal name], [registered address]. Read how we handle data in our Privacy Policy.