Privacy Policy

Last Updated: February 16, 2026

1. Introduction

Welcome to Butter ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our form builder and data collection platform.

Important Notice: Our service is currently not available to users located in the European Economic Area (EEA), United Kingdom, or Switzerland. By using our service, you confirm that you are not accessing it from these regions.

2. Information We Collect

2.1 Information You Provide to Us

  • Account Information: When you create an account, we collect your name, email address, and authentication credentials through Firebase Authentication.
  • Form Data: Information you include in the forms you create, including form fields, templates, and configurations.
  • Response Data: Data submitted by respondents to your forms, including any personal information they choose to provide.
  • Payment Information: When you subscribe to a paid plan, payment information is processed securely through Stripe. We do not store your complete credit card information.
  • Contact Information: Information you provide when contacting us through our contact form or support channels.
  • Branding Assets: Logos, images, and custom branding elements you upload to customize your forms.

2.2 Information Automatically Collected

  • Usage Data: Information about how you interact with our platform, including pages visited, features used, and actions taken.
  • Analytics Data: We use PostHog Analytics to collect information about user behavior, device information, browser type, and general location data.
  • Log Data: Server logs that may include IP addresses, access times, and error information for security and troubleshooting purposes.
  • Cookies and Similar Technologies: We use cookies and similar tracking technologies to maintain your session and improve your experience.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • Service Delivery: To provide, maintain, and improve our form builder platform and related services.
  • Account Management: To create and manage your account, authenticate your identity, and provide customer support.
  • Form Processing: To enable you to create forms, collect responses, and generate reports and analytics.
  • Payment Processing: To process subscription payments and manage billing through our payment processor, Stripe.
  • Communication: To send you service-related notifications, updates, security alerts, and respond to your inquiries.
  • Analytics and Improvement: To analyze usage patterns, improve our platform, develop new features, and enhance user experience.
  • Security: To detect, prevent, and address technical issues, fraud, and security vulnerabilities.
  • Legal Compliance: To comply with legal obligations and enforce our Terms of Service.

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

  • Service Providers: We work with third-party service providers who assist us in operating our platform, including:
    • Firebase (Google) for authentication and analytics
    • Stripe for payment processing
    • AWS for cloud infrastructure and hosting
    • Sentry for error tracking and monitoring
  • Form Recipients: When respondents submit data to your forms, that data is shared with you (the form creator) as intended functionality of the service.
  • Integrations: If you connect third-party services (such as Slack, Zapier, or Google Sheets), we may share relevant data with those services as configured by you.
  • Legal Requirements: We may disclose information if required by law, court order, or governmental request, or to protect our rights, property, or safety.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5. Data Security

We implement appropriate technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit using SSL/TLS protocols
  • Secure authentication through Firebase Authentication
  • Regular security assessments and monitoring
  • Access controls and authentication requirements for our systems
  • Secure cloud infrastructure hosted on AWS

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy. Specifically:

  • Account Data: Retained while your account is active and for a reasonable period after account closure for legal and operational purposes.
  • Form Data and Responses: Retained as long as you maintain your forms or until you delete them.
  • Analytics Data: Retained according to PostHog Analytics retention policies.
  • Backup Data: May be retained in backup systems for up to 90 days after deletion.

7. Your Rights and Choices

Depending on your location, you may have the following rights:

  • Access: Request access to the personal information we hold about you.
  • Correction: Request correction of inaccurate or incomplete information.
  • Deletion: Request deletion of your personal information, subject to legal retention requirements.
  • Data Portability: Request a copy of your data in a structured, machine-readable format.
  • Opt-Out: Opt out of marketing communications (though we send very few promotional emails).
  • Cookie Controls: Manage cookie preferences through your browser settings.

To exercise these rights, please contact us at the email address provided in the Contact section below.

8. Children's Privacy

Our service is not intended for children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children. If we become aware that we have collected information from a child without parental consent, we will take steps to delete that information.

9. International Data Transfers

Your information may be transferred to and processed in the United States and other countries where our service providers operate. These countries may have different data protection laws than your country of residence. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

Note: We do not currently support or process data for users in the European Economic Area (EEA), United Kingdom, or Switzerland.

10. Third-Party Links

Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last Updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

12. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including:

  • The right to know what personal information we collect and how we use it
  • The right to request deletion of your personal information
  • The right to opt-out of the sale of personal information (we do not sell data)
  • The right to non-discrimination for exercising your privacy rights

13. Service Availability and Geographic Restrictions

Our service is not available to users in the European Economic Area (EEA), United Kingdom, or Switzerland. We do not offer our services in these regions and do not process personal data subject to the General Data Protection Regulation (GDPR) or UK Data Protection Act.

By creating an account and using our service, you represent and warrant that you are not located in, and will not access our service from, the EEA, United Kingdom, or Switzerland. If we discover that a user is accessing our service from these regions, we reserve the right to suspend or terminate their account.

Our service is primarily designed for users in the United States and other regions outside of Europe. If you are unsure whether our service is available in your region, please contact us before creating an account.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: Contact Form

Website: Butter Forms

We will respond to your inquiry within a reasonable timeframe.

15. Consent

By using our platform, you consent to the collection, use, and sharing of your information as described in this Privacy Policy.