Acceptable Use Policy

Forms built with hootform are shown to the public under hootform's name, so we hold every form to this policy. It's part of our Terms of Service.

Don't use hootform to

• Collect credentials or payment details: passwords, one-time codes, recovery phrases, bank logins, or full card numbers and security codes. Use a payment provider to take payments.
• Phish or impersonate: pretend to be another person, company or government body, or mislead people about who is asking or why.
• Break the law, or help someone else break it: fraud, scams, illegal goods or services, or infringing someone else's copyright, trademark or privacy.
• Harm children: anything that sexualizes minors, which we report to the authorities.
• Harass, threaten or incite violence or hatred against anyone, or publish someone's private information without their consent.
• Spread malware, or link to it.
• Send spam: share forms by unsolicited bulk email or messages, or use forms to gather contact details for that.
• Collect sensitive data without a lawful basis: health, biometric or financial information, beliefs, ethnicity, sexuality, or government ID numbers, unless you're allowed to collect it and have told respondents why.

And don't

• Try to reach accounts, forms or data that aren't yours, or test hootform's security without our written permission. If you find a vulnerability, please report it to [email protected].
• Overload or disrupt the service: load testing, automated submissions to forms you don't own, or getting around rate limits, bot checks or plan limits.
• Scrape the service, or copy it to build a competing product.
• Use the AI features to produce content this policy forbids, or try to make them reveal other customers' data.

Fair use

Free and Premium plans include unlimited forms and responses for normal use. If one organization's use is so heavy that it affects the service for others — for example millions of responses a month, or files used as general storage — we'll contact you to agree on a way forward before we limit anything.

Reporting a form

If you see a form that breaks this policy, email [email protected] with its link. We look at every report.

What we do

When a form or account breaks this policy, we may take the form down, disable features, suspend the account, or report it to the authorities, depending on how serious it is. Where it's safe and lawful, we'll tell the organization's owners why and give them a chance to fix it first. Phishing, credential collection and harm to children are taken down at once.

If you think we've made a mistake, reply to our email or write to [email protected].