Forms privacy
Your document stays on this device
This release opens PDFs and prepares downloads in your browser. PDF contents, answers and filenames are not uploaded during ordinary local editing. Closing the tab discards unsaved work. Keep downloaded files private; they contain your document and, for completed copies, your answers.
Website requests
Your browser downloads application code and a static font from our hosting provider, Vercel. Hosting logs may include your IP address, page requests and browser information. We do not add document contents or answers to these requests. The local tools do not require an account. Connecting the optional cloud library uses your Emberkit session cookie.
Other services
Links to PDF, Images and support lead to separate services. Sending support a message shares what you choose to provide. Choosing Save to cloud uploads the blank PDF template and its chosen name to your authenticated Emberkit account. Editable answers are cleared, but printed document content and read-only fields remain. We store these templates in our server database, not a public URL. Only your authenticated account can retrieve or delete them. Cancelling a subscription stops new saves; saved items remain downloadable and deletable. Deleting your Emberkit account removes its cloud items from the application database. Provider backups may retain copies for their backup lifecycle. Stripe processes subscription and payment details; PDF contents are not sent to Stripe.
Batch processing
Free batches run on your device. If you explicitly select and confirm Forms Pro cloud processing, your PDF template, mapped CSV values and filename column are uploaded to Emberkit to generate a ZIP. They are processed temporarily and are not stored in the cloud template library. We retain account-linked document counts, request IDs and a fingerprint of each request for quota and retry handling. These records are removed when you delete your account, subject to provider backup retention. Saved mappings contain field names, column names and filename settings, but no spreadsheet rows or PDF contents. You can delete saved mappings even after cancelling Pro.