Deleted files still accessible (via old link).

  • Profile Image
    Sam
    Asked on July 18, 2016 at 02:11 AM

    Hi, I deleted form submissions to free up some space. I am under the impression that once form submission is deleted, the uploaded files will be gone, too. I even cleared my cache.

     

    I have no more form submissions. Even my storage is 0. 

     

    However, when I checked an old link (to an uploaded file), I can still access and even download the documents. Is there a way to totally purge uploaded files? This is a security concern, and it worries me.

     

    Thanks,

    Sam

  • Profile Image
    Irshad
    Answered on July 18, 2016 at 06:28 AM

    I see that the username "sam" is auto-suspended by our anti-phishing system which is strict to scan each JotForm to calculate the probability of phishing activities.

    I manually checked your forms and found one of your form collect credit cards information on jotforms and that breaks Jotform terms of use.

    I would suggest please update your Form, and remove Credit card related details from your Form "REFUND APPLICATION FORM":

    Regarding your old link, can you please send us, what is that old link, which you earlier deleted, but still available, and documents can be downloaded via that old deleted link.

    Please feel free to revert back for further assistance.

    Thanks.

     

  • Profile Image
    Sam
    Answered on July 18, 2016 at 06:43 AM

    Hi, my username is not Sam. My form doesn't collect credit card info. I only have one form, the link to which is included in the original post (https://www.jotform.com/miicpaclaims/claim-referrals)

    Anyways, here's a link of my deleted file. sample file_old lin.

     

  • Profile Image
    Irshad
    Answered on July 18, 2016 at 08:06 AM

    I apologies for the inconvenience. 

    Actually, if you delete your submissions and uploaded files from your account, the data will be stored in our data center for one month. After a month, we are deleting your data. The data received from the JotForms and stored on our servers is encrypted and secured. All our security certificates support high-grade 256-bit encryption. JotForm can also be used in an HIPAA compliant way. Please go through the following link that explains more about security and encryption features of JotForm.

    http://www.jotform.com/answers/333046-is-JotForm-HIPAA-Compliant

    We are also Safe Harbor certified. Please check the guide below for more information:

    http://www.jotform.com/privacy/

    You can also enable the encryption on your form. This will make your form submissions encrypted before they are submitted. to Jotform Servers. At that situation, you will be the only one holding the private key. Nobody except you can access your data. To do that, please check the guide below for more information:

    http://www.jotform.com/help/344-What-Are-Encrypted-Forms-and-How-to-Use-Them-as-Expert

    If it is still not enough, you can use FTP to send the submissions directly to you, if you have your own server. The information about that action is provided on the following link:

     http://www.jotform.com/help/177-How-to-Enable-FTP-on-Form-Submissions

    If you have any question or issues, please do not hesitate contacting us. We will be glad to assist you.

    Thanks.

  • Profile Image
    miicpaclaims
    Answered on July 18, 2016 at 07:04 PM

    OK, thanks for the info!

  • Profile Image
    BDAVID
    Answered on November 02, 2016 at 12:43 PM

    Update: just to let you know, there is a new feature that makes the links of your uploaded files accessible only if you are logged into your JotForm account, please check this blog post for more details: https://www.jotform.com/blog/259-Keeping-Your-Uploads-Secure