Privacy Policy

This policy explains what Ribbit collects, why, and who helps us process it. It covers two groups of people: form creators, who have an account, and respondents, who fill in a published form.

What we collect

• Account email, and an optional display name and avatar. We use your email address to sign you in with a one-time link and to contact you about your account. The display name and avatar are stored only if you add them in your settings.
• Form content. The forms you create: questions, options and settings, plus the chat messages you send while building them.
• Responses. The answers respondents submit to published forms.
• Partial answers. Answers are saved as you move through a form, even if you don’t submit it, so form owners can see where people stop. A random id in your browser tab links your answers together; we don’t use cookies for this and don’t store IP addresses.
• Respondent metadata. For each response: the referrer (the page that linked to the form), the browser’s user agent, the country the request came from, and how long the respondent took to complete the form. We store the country, not the IP address.
• Billing records. If you upgrade to Pro, your plan and subscription status. Payment details go to [Merchant of Record], not to us.

How we use it

We use this information to run the service: to sign you in, generate and store your forms, show your forms to respondents, show responses to you, send your webhook if you’ve set one up, and prevent abuse. We don’t sell personal information and we don’t use it for advertising.

If you’re a respondent

The person or organization that published the form decides what it asks and what happens to your answers. They can see your responses, including partial answers, and the metadata listed above, and can export it. For questions about a response you submitted, contact the form’s owner first. We process responses on their behalf.

Who processes it for us

• Supabase hosts our database and handles sign-in.
• Vercel hosts the app and serves your forms. Like any web host, it keeps standard request logs.
• Anthropic provides the AI model. When you build a form in chat, your messages and the current form are sent to it to produce the draft. Responses to your forms are not sent to it.
• Resend delivers sign-in emails.
• [Merchant of Record] sells and bills Pro subscriptions, and processes payment details.

Cookies

We set a cookie to keep you signed in. We don’t use analytics or advertising cookies, and published forms don’t set tracking cookies on respondents.

Keeping and deleting data

We keep your account data while your account is open. When you delete a form it’s removed from your account and its link stops working, but the data may be kept for a while afterwards. You can export responses as CSV at any time. To get a copy of your data, correct it, or have your account and its data permanently erased, email [contact email]. The Terms of Service explain the rest of how the service works.

Changes to this policy

If we change this policy in a way that matters to you, we’ll tell you by email or in the app before the change takes effect.