Data Retention & Deletion
Formtorch keeps submissions for a period that depends on your plan. Retention works in two phases: an active window where all data is fully accessible, followed by a locked archive before permanent deletion.
How retention works
Active window
Submissions are fully accessible in the dashboard, exports, and API. No restrictions.
Locked archive
After the active window ends, submissions enter a locked archive. You can see them in the dashboard (with a lock icon) but the form data is hidden. Locked submissions are excluded from CSV exports and API responses.
You can still delete a locked submission at any time — useful for GDPR right-to-erasure requests.
Permanent deletion
After the archive window ends, submissions are permanently and irreversibly deleted by an automated daily job. There is no recovery path after this point.
Retention periods by plan
| Plan | Active window | Locked archive | Permanently deleted after |
|---|---|---|---|
| Free | 0–30 days | 31–180 days | 180 days |
| Starter | 0–365 days | 366–540 days | 540 days |
| Pro | Unlimited | Never locked | Never deleted |
Upgrading unlocks your submissions
If you upgrade your plan, previously-locked submissions are immediately unlocked and become fully accessible again — no manual action needed. Access state is computed from your current plan, so upgrading takes effect instantly.
Upgrading before the active window ends also extends the retention period for all existing submissions going forward.
Deleting individual submissions
Open a submission in the dashboard and click Delete. The deletion is immediate and permanent, including any file attachments. This works for both active and locked submissions.
Deleting all submissions for a form
On the submissions page, use Select all and then Delete selected to remove all submissions in bulk. For forms with a large number of submissions, this may take a few moments.
GDPR and right to erasure
If a user requests deletion of their data:
- Use submission search to find their submissions by email or name.
- Delete each matching submission — locked submissions can be deleted the same way.
- The deletion is immediate and permanent.
Formtorch does not store personal data outside of submission records. Deleting a submission removes all associated field data, IP address, user agent, and file attachments.
See GDPR Compliance for a full walkthrough.
Notification recipient removal
If a user asks to be removed from notification emails:
- They can unsubscribe using the link in any notification email.
- You can remove them manually from Form Settings → Notifications.
Removal from the recipient list does not delete their past submissions — it only stops future notifications.
Data storage location
All submission data is stored in Formtorch’s Neon Postgres database hosted in the US. File attachments follow the same storage region. If you have specific data residency requirements, contact support.