Security and Data Handling

How form links, credentials and CRM data are handled.

This page documents the technical data-handling model. See the Security page for the full access-lifecycle explanation.

Each generated form uses a unique secure link. The link identifies the form and its associated CRM record without requiring the CRM Record ID to be exposed as a visible or hidden form field.

Data Storage

JetSubmit does not persist CRM field values or submitted form contents. JetSubmit stores only the minimum required to operate the service:

  • secure OAuth credentials
  • operational metadata required to operate the service

CRM data is retrieved from HighLevel when required, and updates are written back to HighLevel.

Current Link Revocation Behaviour

Generated links cannot currently be manually revoked. A link stops operating when:

  • it expires, or
  • single-submission mode is enabled and the first successful submission has occurred