This policy explains what data Widgy collects, why, and the choices you have. We keep it short and try to collect only what the service needs.
Last updated July 2026Account data. When you sign up we collect your email address through our authentication provider so we can identify your account and sign you in.
Content you create. The forms you build — titles, questions, and settings — along with any workspace logo you upload.
Responses you collect. Answers submitted to your forms, including any name or free-text a respondent provides.
Usage and technical data. Basic product analytics and server logs (such as pages visited and approximate timing) used to operate, secure, and improve the service.
We use this data to provide the service — authenticating you, storing and rendering your forms, collecting and summarising responses, and making them available to you and to any AI client you connect over MCP. We also use it to keep the service secure and to understand how it’s used so we can improve it.
We rely on a small set of processors to run Widgy: an authentication provider for sign-in, a cloud host and managed database for storing your data, a bot-protection provider to guard form submissions, and a product analytics provider. Each processes data only to provide their part of the service.
For the forms you build, you are the data controller and Widgy is your processor: you decide what to ask and how to use the answers. You are responsible for having a lawful basis to collect respondent data and for providing your respondents with any notices required in your jurisdiction.
To protect the AI assistants that read responses, we strip hidden and invisible characters from submitted text and label it as untrusted before it reaches any connected MCP client.
We keep your account data and content for as long as your account is active. Responses are retained until you delete the form or your account, or ask us to remove them. Backups and logs are kept for a limited period for security and reliability.
Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us using the details below.
We use industry-standard measures to protect your data in transit and at rest. No system is perfectly secure, but we work to limit access to your data to what is needed to run the service.
We may update this policy as the service evolves. When we do, we’ll revise the “last updated” date above and, where changes are material, communicate them appropriately.
Questions or requests about your data? Email us at privacy@widgy.co.