Account, team & billing
Plans
See Pricing for what's included on each tier and how billing cadence/pricing works - this page covers account-level features, not plan numbers.
Team members & roles
On Pro plan and higher, invite teammates to your account from Settings → Team. Each invited member gets one of three roles:
| Role | Can do |
|---|---|
| Admin | Everything - including account settings, billing, API keys, connected OAuth providers, and managing other team members |
| Editor | Create and edit forms, submissions, and notification destinations - not account-level settings |
| Viewer | Read-only access to everything Editor can see |
The account's own owner is always effectively Admin, with no need for a team-member row of their own. An invite is sent by email and must be accepted before it takes effect.
Activity log
Settings → Activity is a record of what has been done to your account and when, so you can answer "who deleted that form?" or "when did that plan change?" without guessing. It is available on every plan, and only to the account's Admin role (the log names every teammate, and team management is Admin-only too). Editors and Viewers are told they need Admin access.
Each line shows the time, a one-sentence description, and who did it:
- A person, shown by the email they used, including a teammate acting on your account. A change an AI tool made through MCP shows that person's email followed by "(via MCP)".
- BootForm (automatic), for things BootForm does for you on its own, such as a plan change coming from a payment.
- BootForm support, when a member of our support staff changed something on your account. You see the fact and the time, never the staff member's identity.
It covers forms (created, moved, deleted), workspaces, API keys (created, revoked), connected apps (connected, disconnected), the team (invited, joined, removed), notification destinations, billing, and account security (password, email, two-factor, account deletion). You can filter by what happened, who did it, and when, and page through older entries.
It is a record of actions, not a full history of everything you do. It never contains submission content, and it never shows an API key, a webhook URL, a token or a password: an API key appears only as its label and its short public prefix. Reading and browsing the dashboard, and signing in, are not recorded. Entries are kept for at least 12 months, then removed.
The same list is available from the API as GET /activity, documented in the OpenAPI spec.
Connected apps
AI tools that use BootForm through MCP connect with a browser sign-in rather than an API key. Settings → Connected Apps lists each one: the app, who connected it, which account it works in, and when it was last used. Disconnect cuts it off on its next request; it has to sign in again to reconnect. Everyone sees the connections they made; an Admin of a team account also sees, and can disconnect, teammates' connections to it. A connected app has the same role in its account as the person who connected it.
Two-factor authentication
Every plan, including Free, can enable TOTP-based two-factor authentication (Account → Security) - account security isn't a paywalled feature. Once enabled, logging in also requires a code from an authenticator app.
OAuth login
Connect GitHub, Google, or Microsoft to your account (Account → Connected providers) to sign in without a password. You can have both a password and one or more connected providers on the same account at once.
Billing and plan changes
BootForm bills through Paddle. Changing plans takes effect immediately - no waiting for a billing cycle to end. A few behaviors worth knowing:
- Upgrading immediately unlocks the new plan's features and quota, and extends any already-stored submissions to the new plan's retention window.
- Downgrading applies the new plan's retention window to every submission you already have: those older than it are deleted, with their files, within a day. The downgrade confirmation tells you when this happens, so export first if you need them.
- Attachment storage is a total across all your forms, shown on the Billing page. When it is full, new submissions are saved without their files (see When attachment storage is full). Downgrading below your current usage deletes nothing; new files are refused until it fits.
- The monthly submission quota is per account: all your forms share it, so a Free account gets 250 a month in total, however many forms it has. Deleting a form doesn't give its submissions back for that month.
- Submissions received beyond your monthly quota are either hard-stopped (Free plan) or billed as metered overage (every paid plan). See Pricing for the exact overage rate per tier. On every plan, the account owner is emailed when usage crosses the warning threshold (80% unless you change it on the Account page) and again at 100%. See Free quota emails for what Free's say.
- Forms are unlimited on every plan, under fair use: up to 1,000 per account. Past that, creating or claiming a form is refused with
FORM_LIMIT_REACHED; contact us if you need more.
Emails from BootForm
BootForm sends your account two kinds of email.
Service emails: always sent
These are about your account and your forms, so they can't be turned off: sign-in links and password resets, email verification (and one reminder a day after a password signup that still isn't verified, with a fresh link) and email address changes (the confirmation link goes to the new address, and a notice goes to the current one), team invites, billing emails (overage charges and failed payments), quota and attachment storage warnings, a delivery that failed (at most one email per destination a day: later failures within the day are counted and reported in the next one), spam alerts about a form, a reminder when a claimed form has nowhere to send its submissions, and your export downloads. Submission notifications are separate again: they go wherever you set them up on each form.
Free quota emails
A Free account's 250 submissions a month are shared by all its forms, and at the limit new submissions are refused rather than billed. So the owner gets two emails a month at most:
- At the warning threshold (80% unless you changed it on the Account page): how many of the 250 are used, that once they run out new submissions to any form are refused and not saved until the 1st of next month (UTC), and that everything already received stays safe.
- At 100%: that from now until the 1st of next month (UTC) new submissions are refused, not saved, and the visitor who sends the form sees an error; that everything already received is safe; and that Starter gives 2500 a month and never stops accepting them.
Each is sent at most once per calendar month (UTC). Paid plans get the same two emails, saying instead that nothing stops and the overage is billed.
Onboarding emails: one click to turn off
A new account gets a few short emails in its first two weeks, to help get its first form working. Each one is sent at most once, never two within 24 hours, and each is skipped once you've already done the step it's about. They start once your email address is verified:
| When | |
|---|---|
| Welcome | Soon after your email address is verified (right after signup with GitHub, Google or Microsoft): the three ways to get a form live |
| Your first form | Two days after signup, if you haven't created or claimed a form yet |
| Nothing received yet | Three days after your first form, if none of your forms has received a submission: what to check |
| First submission | About an hour after your first submission arrives: what to set up next |
| A note from the founder | Two weeks after signup, if still nothing has been received: a plain question about what stopped you, which you can just reply to |
To turn them off:
- Use the link at the bottom of any onboarding email, or your mail app's own Unsubscribe button. It works without signing in and turns off all of them, not just the one you're reading. Some company mail scanners open every link in an email to check it, which can turn them off without you clicking.
- Or switch off "Onboarding and tips emails" on the Account page. That switch is also the only way to turn them back on.
The setting belongs to you, not to a team account you work in. Service emails, including every quota, security and billing email, keep coming either way.