Privacy and retention
Mark answers personal or sensitive, keep sensitive answers sealed, choose how long answers are kept, and know what respondents are told, under Ghana's Data Protection Act.
Agoo is in early access. This page describes the feature as it ships to early-access organisations; screens are illustrative.
Whoever makes a form decides what it asks and why, and is responsible for the answers under the Data Protection Act, 2012 (Act 843). Agoo processes them for you. Ask only what you need, and say why in the form's words.
Personal and sensitive answers
Each question has privacy marks in the inspector:
| Mark | What it does |
|---|---|
| Personal | The answer says who someone is or how to reach them. Listed in your records of personal data |
| Sensitive | The answer is sealed as it arrives. It's never in a summary or an email, only in an export when someone allowed ticks the box, and shown only after Reveal |
| Masked | Shown partly hidden on screen until revealed |
Ghana Card questions are sensitive and masked from the start. Mark health details, and anything else that could harm someone if it got out, as sensitive too.
Who can reveal: a workspace's Owners, and on Forms Team, the people you allow form by form. Each reveal, and each export that includes sensitive answers, is recorded.
How long answers are kept
Choose a time, and Agoo deletes what's past it, checking every hour:
- For a question: in its privacy marks. When its time is up, that answer is blanked and the rest of the response stays.
- For a form: under the responses table, Change.
- For the whole workspace: under Exports (Owners and Admins).
A form's own time comes before the workspace's. Responses in the bin go after 30 days. A team workspace that's deleted can be restored for 30 days, then everything in it is deleted.
What respondents are told
Every form shows:
- who receives the answers: the workspace's name, or your organisation's;
- that the maker sees the answers and when they were sent, and that Agoo keeps a scrambled form of the connection's address for 30 days to stop abuse. A form says "This form doesn't ask who you are" only when nothing in it says who someone is; the word "anonymous" alone is never used;
- "Agoo Forms will never ask for your password or PIN";
- Your data, saying how to ask you about their answers, and Report this form.
What someone types is kept in their own browser for up to a day, so a dropped connection loses nothing; a Ghana Card number is never kept there. No cookies are set on a form to answer.
Your rights and your workspace's data
Owners export the whole workspace whenever they like. For an organisation's workspace, its forms and responses are part of the organisation's own export and deletion, and requests about them go to the organisation's data requests inbox.
Read more in the privacy notice, the terms and the acceptable use policy.
Responses and exports
Read responses in a table across every version, filter them, open one at a time, see a summary of each question, use the bin, export CSV or Excel, and choose your emails.
Levels and limits
Forms Free, Forms Plus and Forms Team, their prices and limits, what each Agoo plan includes, Agoo for Good, and what happens at a limit.