Skip to navigation
Data & Privacy

How AI Uses Your Data

Learn how Typeform AI processes and protects your data while delivering intelligent features.

Data Processing Overview

What AI Accesses

  • Form questions and structure
  • Response data (when enabled for specific features)
  • Usage patterns and metadata
  • Performance metrics

What AI Does NOT Access

  • Payment information
  • Password or authentication data
  • Data from forms where AI is disabled
  • Personal data outside your account

Data Privacy Principles

1. Your Data Stays Yours

  • You own all form data and responses
  • AI processing doesn’t transfer ownership
  • You can export or delete anytime

2. No Cross-Account Learning

  • Your data never trains models accessible to other customers
  • Each account is isolated
  • No competitive insights shared

3. Minimal Data Processing

  • AI only processes what’s necessary for the feature
  • Temporary processing for analysis
  • Automatic deletion of processing artifacts

4. Transparent Controls

  • Clear opt-in/opt-out for each AI feature
  • Granular control at form level
  • Audit logs available

Third-Party AI Providers

Typeform uses industry-leading AI providers with strict data agreements:

OpenAI - Zero retention policy, SOC 2 Type II certified Google Cloud AI - Data processing agreement, EU residency available Anthropic Claude - No training on customer data, encryption at rest

All providers have Business Associate Agreements with contractual data protections.

Your Controls

Account Level

  • Enable/disable AI features globally
  • Set data retention policies
  • Choose data residency (US or EU)
  • Export all AI interactions

Form Level

  • Enable AI for specific forms only
  • Exclude sensitive forms from AI
  • Set permission levels
  • Audit AI usage

Respondent Level

  • Respondents can opt out of AI features
  • Right to be forgotten honored
  • Data deletion within 30 days

Compliance

  • GDPR: Full compliance, DPA available
  • CCPA: California privacy rights honored
  • SOC 2 Type II: Annual audits
  • ISO 27001: Information security certified
  • HIPAA: Available for healthcare (BAA required)

For more details, review our Privacy Policy or contact privacy@typeform.com