Data deletion

Last updated: November 3, 2026

This page explains how to have your Formtool data deleted, including if you signed in with Google or Facebook. It is public: you do not need to be signed in to read it.

1. You have a Formtool account (professional or organization)

  1. Open the sign-in page and sign in (email and password, or Google / Facebook).
  2. Open the Data page (donnees.php): you can first prepare an export of your data.
  3. Choose Delete my account (supprimer-compte.php): read what will be erased, then confirm in two steps.
  4. During the 30-day grace period you can cancel the deletion. After that, erasure is permanent.

The page may first ask you to settle a few points: for example cancel a paid subscription or remove team members.

2. You cannot sign in

Write to us at confidentialite@formtool.app from the account’s email address, with the subject “Formtool data deletion”. We verify your identity before acting.

3. Google or Facebook sign-in

Removing Formtool in your Google settings (Google Account › Security › Third-party connections) or Facebook settings (Settings › Apps and websites) only removes the sign-in authorization on their side; it does not erase the data in your Formtool account. To delete it, follow the steps in section 1 or 2. The information received from Google or Facebook (name, email, provider identifier) is part of your account and is erased with it.

4. You filled in a form sent by a professional

The professional or organization that sent you the form is responsible for your information: contact them first to obtain a copy, a correction or erasure. You can also write to us at confidentialite@formtool.app.

5. What is erased, what is kept

  • Erased: your account, your forms, sends and responses, your PDF templates, your API keys and webhooks, the link to your Google or Facebook account.
  • Kept only where the law requires it: invoices and accounting records, and responses the professional has placed under legal retention (period chosen by the professional, 5 years to start with, adjustable; they are kept read-only until the end date, then destroyed). A trace with no name or email (date and counts) is also kept.
  • Backup copies: they are replaced on their normal cycle.

Learn more: privacy policy · terms of use · contact us.