Stepkiln privacy

Updated October 5, 2026. Great Work LLC ("we") makes Stepkiln. Contact: hello@greatwork.company.

Answers your visitors send

A Stepkiln form on your site sends each answer, and any uploaded files, to our submissions service at forms.greatwork.company. We check it against your form's rules, deliver it to the destinations you chose, and keep it, with its files and delivery log, for 30 days so your inbox and retries work. After 30 days the answer and its files are deleted. You can delete a form (and everything stored for it) from the plugin at any time. We don't use answers for anything else, don't sell them and don't read them unless you ask us to help with a delivery problem.

We don't store visitors' IP addresses, and the service keeps no access logs. IP addresses are held in memory for a minute or an hour to enforce per-visitor limits against spam. File links in emails and in the inbox are signed and stop working when the file is deleted.

You're responsible for telling your visitors what you collect and why (for example in your own privacy policy), and for what you ask them. Stepkiln acts on your behalf as a processor of the answers.

Your Framer project

The plugin reads and writes only its own code files (named Stepkiln_...), puts the form component on the canvas when you save, reads the project's published addresses (to allow only your sites to send answers), and keeps a small note per form in the project's plugin data: the form's edit token and short descriptions of its destinations. People who can edit the project can manage its forms.

Destination credentials

Email addresses, webhook addresses and tokens for Airtable and Notion are sent once to the submissions service, stored encrypted (AES-256-GCM) and used only to deliver your answers. They're never shown back in full; the plugin shows a short summary. Removing a destination or the form deletes them.

What the plugin stores in your browser

Your license key and a short-lived session, in the plugin's own storage on its Framer address. Nothing about your forms is stored there.

What we receive about you

When you save a form: the form's questions and settings, your destinations, the project's name and published addresses, and (with a license) your license key and your Framer account id, which we use to confirm the license with our licensing service and re-check it daily. The license check (addons.greatwork.company) receives your key and your Framer account id and name. Checkout and billing are handled by Stripe for Great Work LLC.

Third parties

• Stripe: payments (licensing provider: Great Work's addon-licensing service).
• Resend: sends the emails you set up (the owner's copy and, if you choose, the visitor's copy).
• The destinations you choose (Google, Airtable, Notion, Slack, Discord, your webhook) receive the answers under their own terms.
• DigitalOcean hosts the submissions service in the United States.

Changes

If this changes, we'll update this page and the date at the top.