Privacy & Cookie Policy – Printer Friendly
Privacy Policy 2025 (Print-Friendly)
Gravityforms.com collects some personal data from its users. We highly respect your privacy. All data we collect is used for internal purposes only, and we will never sell your personal information to third parties.
Owner and Data Controller
Rocketgenius, Inc.
1620 Centerville Turnpike, Suite 102
Virginia Beach VA 23464-6500
United States
Owner contact email: [email protected]
Types of Data Collected
Among the types of Personal Data that Gravityforms.com and Gravityapi.com collect, by themselves or via third parties, there are: Cookies, Usage Data, email address, username, data communicated while using the service, first name, and last name.
Complete details on each type of Personal Data collected are provided in dedicated sections below or by specific explanation texts displayed prior to Data collection. Personal Data may be freely provided by the User, or—in the case of Usage Data—collected automatically. Unless stated otherwise, all Data requested by Gravityforms.com and Gravityapi.com is mandatory, and failure to provide it may make it impossible to use certain services.
Users are responsible for any third-party Personal Data obtained, published, or shared through Gravityforms.com and confirm that they have the third party’s consent to provide it.
Google OAuth Authentication & Data Usage
When authenticating via Google OAuth for certain Gravity Forms Add-Ons:
- No Google user data is stored on Gravityforms.com or GravityAPI.com.
- No Google user data is shared, transferred, or disclosed to third parties.
- OAuth is solely used to verify user identity with Google services.
- Users can revoke access anytime via their Google Account settings.
For more details on Google’s handling of authentication data, see Google’s Privacy Policy.
Mode and Place of Processing the Data
Methods of Processing
The Owner takes appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of the Data. Processing is performed using computers and IT tools, following organizational procedures strictly related to the purposes stated. Certain Data may be accessible to persons in charge (e.g., administration, sales, marketing, legal, or system admins) or external parties (technical service providers, mail carriers, hosting providers, IT companies, etc.) as Data Processors.
Legal Basis of Processing
Possible legal bases for processing include:
- Consent for specific purposes
- Performance of a contract or pre-contractual obligations
- Compliance with a legal obligation
- Legitimate interests pursued by the Owner or by a third party
Place
Data is processed at the Owner’s operating offices and at any other places where involved parties are located. Depending on the User’s location, data transfers may require sending Data to another country. Users can inquire about these transfers and security measures using the contact info provided.
Retention Time
Data is stored as long as required for its purpose. Once the retention period expires, Data is deleted. At that point, certain rights (like access, erasure, rectification, or portability) can no longer be exercised.
The Purposes of Processing
Data is collected to allow the Owner to provide services such as content commenting, displaying external platform content, spam protection, payment handling, managing contacts, analytics, hosting/back-end services, interaction with third-party data platforms, support/contact requests, and tag management. Each purpose’s specific Personal Data usage is detailed in relevant sections.
Advertising
-
Impact (Impact Tech, Inc.)
Privacy Policy: Link
Description: Advertising service. Data: Trackers, Usage. May be considered a “sale” under CCPA. -
Facebook Lookalike Audience (Meta)
Privacy Policy: Link — Opt Out: Link
Description: Behavioral targeting. Data: Trackers, Usage. Possibly a “sale” under CCPA.
Analytics
-
Google Analytics
Privacy Policy: Link — Opt Out: Link
Web analysis. Data: Cookies, Usage. -
HubSpot Analytics
Privacy Policy: Link — Opt Out: Email
Data: Cookies, Usage. -
Hotjar (Form Analysis & Conversion)
Privacy Policy: Link — Opt Out: Link
Data: Trackers, Usage. Possibly a “sale” under CCPA. -
Facebook Ads conversion tracking (pixel)
Privacy Policy: Link — Opt Out: Link
Data: Trackers, Usage. Possibly a “sale” under CCPA. -
Jetpack / WordPress Stats
Privacy Policy: Link — Opt Out: Link
Data: Trackers, Usage. Possibly a “sale” under CCPA.
Content Commenting
Displaying External Content
-
Google Fonts
Privacy Policy: Link
Data: Usage, various. Possibly a “sale” under CCPA. -
Adobe Fonts
Privacy Policy: Link
Data: Usage, various. -
Gravatar (Automattic Inc.)
Privacy Policy: Link
Data: email address, Usage. Possibly a “sale” under CCPA.
Handling Payments
-
Chargify (Maxio LLC)
Privacy Policy: Link
Payment service. Data: various. -
Braintree (PayPal Inc.)
Privacy Policy: Link
Payment service. Data: various. -
PayPal (PayPal Inc.)
Privacy Policy: Link
Payment service. Data: email address. -
Stripe
Privacy Policy: Link
Payment service. Data: billing address, email address.
Heat Mapping & Session Recording
Hosting & Backend Infrastructure
-
Amazon Web Services (AWS)
Privacy Policy: Link
Data: various. Hosting & backend. -
iubenda Consent Solution
Privacy Policy: Link
Data: communicated while using the service. Manages consent proofs. -
New Relic
Privacy Policy: Link
Monitoring. Data: Trackers, Usage, various.
Interaction with Data Collection Platforms
-
GetSiteControl Promo widget
Privacy Policy: Link
Lightbox popup. Data: Cookies, Usage.
Managing Contacts & Sending Messages
-
HubSpot
Privacy Policy: Link — Opt Out: Email
Email/contact management. Data: first/last name, email address, subscription details. -
Postmark
Privacy Policy: Link
Email sending. Data: email, first/last name, username.
Managing Support & Contact Requests
-
Help Scout
Privacy Policy: Link
Support/contact request management. Data: various. -
Klaus (OÜ Qualitista)
Privacy Policy: Link
Customer support quality. Data: various.
Registration & Authentication
-
Stripe Auth
Privacy Policy: Link
OAuth by Stripe. Data: Trackers, various.
Remarketing & Behavioral Targeting
-
Facebook Custom Audience
Privacy Policy: Link
Remarketing & behavioral targeting. Data: email address, Trackers.
SPAM Protection
-
Google reCAPTCHA
Privacy Policy: Link
SPAM protection. Data: Cookies, Usage. -
Akismet (Automattic Inc.)
Privacy Policy: Link
SPAM protection. Data: various.
Tag Management
-
Google Tag Manager
Privacy Policy: Link
Manages tags/scripts. Data: Usage.
Affiliate Program Management
-
Impact Tech, Inc.
Privacy Policy: Link
Marketing affiliate program. Data: Cookies, Usage.
Product Management
-
Productboard
Privacy Policy: Link
Customer-driven product management. Data: usage, feedback.
Information on Opting Out of Interest-Based Advertising
In addition to any provided opt-out feature, users can learn about opting out of interest-based advertising generally in the Cookie Policy.
-
Facebook
Privacy Policy: Link
Data Processing Terms: Link
Allows targeted ad campaigns & performance tracking.
The Rights of Users
Users may exercise certain rights regarding their Data processed by the Owner, including:
- Withdraw consent at any time.
- Object to Data processing.
- Access their Data.
- Verify and seek rectification.
- Restrict Data processing under certain circumstances.
- Have Personal Data deleted or removed under certain circumstances.
- Receive Data and have it transferred to another controller.
- Lodge a complaint with a data protection authority.
Cookie Policy
Gravityforms.com and Gravityapi.com use Cookies. For details, see the Cookie Policy.
Additional Information
Legal Action
The User’s Personal Data may be used for legal purposes by the Owner in Court or in stages leading to legal action, e.g., in cases of improper use of Gravityforms.com.
System Logs & Maintenance
For maintenance, Gravityforms.com and any third-party services may collect logs that record interaction, including IP addresses, for operation and diagnostic purposes.
Do Not Track Requests
Gravityforms.com does not support “Do Not Track” requests. Refer to each third-party service’s policies to see if they honor DNT requests.
Changes to This Privacy Policy
The Owner reserves the right to make changes at any time by notifying users on this page. It’s recommended to check often. If changes affect processing performed on the basis of consent, the Owner shall collect new consent where required.
Information for Californian Consumers
This part supplements the rest of the policy per “The California Consumer Privacy Act of 2018.” It covers categories of personal information collected, disclosed, or sold, plus how to opt out. Users may request deletion of personal data, and the Owner will respond within the timeframes mandated by law.
Information for Users Residing in Brazil
Under “Lei Geral de Proteção de Dados” (LGPD), the rights and obligations for Brazilian users are detailed herein, including legal bases for processing and transfers of personal information outside Brazil.
Latest update: February 22, 2025