● Set up

Privacy
retention, export and erasure.

Form submissions contain personal data. Form Bridge keeps the full payload only as long as you choose, removes it with the Perfex cron, and lets an administrator export or erase everything the log holds about one e-mail address.

Default 30 daysIP off by defaultExport and erase by e-mail

01What is stored where

Data	Where	How long
Raw payload, fields, e-mail address of a submission	Form Bridge submission log	Until the retention period passes (default 30 days), or until you delete it
Log line: time, connection, status, error, link to the record	Form Bridge submission log	Until you delete the submission or the connection
Sender's IP address	Not stored as an address unless you switch on Save the sender's IP address in the record note (off by default). The log keeps a keyed hash of it, which is removed with the payload.	As above
Leads, customers, contacts, tickets, notes	Perfex	Perfex records: handle them with Perfex's own tools, including its GDPR features
Webhook links	Only a SHA-256 fingerprint of the secret part	A copy of the database does not reveal a working link
Signing secrets and the AI key	Encrypted with your Perfex installation's encryption key	Until you remove them

02Retention

Open Form Bridge › Settings(administrators only).
Set "Keep payloads for (days)"Default 30, up to 3650. 0 keeps payloads until you delete them by hand.
Click Save settings

Each cron run then removes, for submissions older than that, the raw payload, the field values, the e-mail address and the IP hash. The log line stays and shows "Payload removed". Review queue items nobody decided are closed as Skipped, Captured submissions become Skipped, and AI proposals for those submissions are deleted. A submission without its payload cannot be replayed.

Remove old payloads now (Settings › Data requests) runs the same clean-up immediately.

03Export or erase by e-mail

Under Settings › Export or erase by e-mail:

Export downloads form-bridge-export.json with every logged submission of that e-mail address: connection, time, status, created record, fields and raw payload.
Erase deletes every logged submission of that e-mail address from the log, with its review queue items and AI proposals. This cannot be undone.

Both cover only the Form Bridge log. The search uses the e-mail address Form Bridge found in each submission (a field whose name contains "mail" first). Leads, customers and tickets are Perfex records; export or delete them with Perfex's own tools. Both actions are written to the audit log with a shortened hash of the address, not the address itself.

04Marketing context in the record note

With Save UTM parameters, referrer and page address as a note on the record (connection Setup, on by default), Form Bridge adds a note to a new lead or customer with utm_source, utm_medium, utm_campaign, utm_term, utm_content, the referrer and the page address, when the form sent them. The IP address is added to that note only when the IP setting above is on.

05Data sent to an AI provider

Only when an administrator switches the AI helper on, and only for the actions described in Optional AI: field names, question texts and a short sample value (up to 40 characters per field) for a mapping suggestion; long text answers (80 characters or more, up to 4000 characters each) for a summary. Nothing is sent to any AI provider while the AI helper is off.