Features
A complete form backend that works for one site today and many sites tomorrow.
Collect from anywhere
HTML, JSON & multipart
Accepts plain form posts, fetch/JSON, and file uploads. No JavaScript required.
Per-form CORS
Lock a form to specific origins, or leave it open. Preflight handled automatically.
Submit behaviours
Redirect, return JSON, or show a hosted thank-you page — your choice per form.
File uploads
Attach files to submissions with per-file and total-size limits. Download them securely later.
Keep spam out
Honeypot
A hidden field that silently drops bots without annoying real people.
Rate limiting
Per-form, per-IP limits stop floods before they reach your inbox.
Turnstile & reCAPTCHA
One switch adds privacy-friendly captcha verification.
Custom rules
Block or flag on keywords and email addresses you define.
Notify & respond
Owner notifications
Email the right people instantly, with Reply-To set to the sender.
Auto-responder
Send a templated reply back to whoever submitted the form.
White-label sending
Verify a client's domain and send from their brand, not ours.
Link-only mode
For sensitive data, email a link to the dashboard instead of the contents.
Route & integrate
Signed webhooks
Delivered with HMAC signatures and automatic retries.
Slack
Post each submission to a channel via an incoming webhook.
Zapier & more
Consume the generic webhook from any automation tool.
CSV / JSON export
Download a form's whole submission history any time.
Solo or multi-site
Your own site
One workspace is enough for a portfolio, SaaS landing page, or side project — no client setup required.
Multiple sites
Add a workspace per site or client project — each with its own forms, inbox, and branding.
One dashboard
Switch between sites without separate accounts or logins.
Client inbox access
Invite a client to view their submissions read-only — optional when you need it.
Usage & billing
Plan limits, metering, and Stripe checkout built in.
Trust & compliance
Hosted in the US
Based in Toronto, Ontario, Canada. All submissions stored on US infrastructure — disclosed in our DPA and customer privacy snippet.
Auto-delete retention
Configurable per site with separate spam TTL. Daily purge job — no manual inbox cleanup like Formspree.
DPA + SCCs on all plans
Click-accept DPA at signup; Standard Contractual Clauses annex for EU/UK controllers.
Link-only email mode
Owner notifications can omit field values for privacy-sensitive forms.
DSAR erase
Delete a person's submissions on request in one action.
Access audit log
Every view, download, and delete is recorded.