Can we collect sensitive information?

  • Profile Image
    Will Hawthorne 
    Asked on May 29, 2019 at 09:36 AM

    I was thinking we could use your forms, but I saw in the Encrypted forms FAQ something about not collecting user data? We will need to be able to collect social security numbers and banking info. Is this outside of the TOS?

  • Profile Image
    Answered on May 29, 2019 at 11:27 AM

    You may collect social security numbers only for legitimate purposes and when your business requires it such as:

    • Insurance companies

    • Credit card companies, lenders, and any other company receiving a credit application from you

    • The three main credit reporting agencies: TransUnion, Equifax, and Experian

    • Any company that sells products or services that require notification to the IRS, including:

    - Investment advisors

    - Banks

    -Real estate purchases

    -Financial transactions over $10,000, such as automobile purchases; and other financial transactions

     If your purpose is not to collect SSN from the general public, but from your own customers; and if your business is among the list above and you comply with recommendations below, then we can make the exception:

     1. Add Terms of Use widget (for your users to read and agree). This will surely make your forms not to be considered as guilty of phishing activities

    2. Add a Signature widget where your users sign and agree to provide such sensitive information.

     3. User your company email address in your account profile.

    4. Encrypt your form data.

    Unfortunately, we don't allow collecting any banking/ credit information in the forms. This would violate our terms of use.

    Hope this information helps.

    If you need further assistance, let us know.