Deleted files still accessible (via old link).

  • Sam
    Asked on July 18, 2016 at 2:11 AM

    Hi, I deleted form submissions to free up some space. I am under the impression that once form submission is deleted, the uploaded files will be gone, too. I even cleared my cache.

     

    I have no more form submissions. Even my storage is 0. 

     

    However, when I checked an old link (to an uploaded file), I can still access and even download the documents. Is there a way to totally purge uploaded files? This is a security concern, and it worries me.

     

    Thanks,

    Sam

  • Irshad
    Replied on July 18, 2016 at 6:28 AM

    I see that the username "sam" is auto-suspended by our anti-phishing system which is strict to scan each JotForm to calculate the probability of phishing activities.

    I manually checked your forms and found one of your form collect credit cards information on jotforms and that breaks Jotform terms of use.

    I would suggest please update your Form, and remove Credit card related details from your Form "REFUND APPLICATION FORM":

    Regarding your old link, can you please send us, what is that old link, which you earlier deleted, but still available, and documents can be downloaded via that old deleted link.

    Please feel free to revert back for further assistance.

    Thanks.

     

  • Sam
    Replied on July 18, 2016 at 6:43 AM

    Hi, my username is not Sam. My form doesn't collect credit card info. I only have one form, the link to which is included in the original post (https://www.jotform.com/miicpaclaims/claim-referrals)

    Anyways, here's a link of my deleted file. sample file_old lin.

     

  • Irshad
    Replied on July 18, 2016 at 8:06 AM

    I apologies for the inconvenience. 

    Actually, if you delete your submissions and uploaded files from your account, the data will be stored in our data center for one month. After a month, we are deleting your data. The data received from the JotForms and stored on our servers is encrypted and secured. All our security certificates support high-grade 256-bit encryption. JotForm can also be used in an HIPAA compliant way. Please go through the following link that explains more about security and encryption features of JotForm.

    http://www.jotform.com/answers/333046-is-JotForm-HIPAA-Compliant

    We are also Safe Harbor certified. Please check the guide below for more information:

    http://www.jotform.com/privacy/

    You can also enable the encryption on your form. This will make your form submissions encrypted before they are submitted. to Jotform Servers. At that situation, you will be the only one holding the private key. Nobody except you can access your data. To do that, please check the guide below for more information:

    http://www.jotform.com/help/344-What-Are-Encrypted-Forms-and-How-to-Use-Them-as-Expert

    If it is still not enough, you can use FTP to send the submissions directly to you, if you have your own server. The information about that action is provided on the following link:

     http://www.jotform.com/help/177-How-to-Enable-FTP-on-Form-Submissions

    If you have any question or issues, please do not hesitate contacting us. We will be glad to assist you.

    Thanks.

  • miicpaclaims
    Replied on July 18, 2016 at 7:04 PM

    OK, thanks for the info!

  • David JotForm Support Manager
    Replied on November 2, 2016 at 12:43 PM

    Update: just to let you know, there is a new feature that makes the links of your uploaded files accessible only if you are logged into your JotForm account, please check this blog post for more details: https://www.jotform.com/blog/259-Keeping-Your-Uploads-Secure