Account Settings

The Settings page in the dashboard (https://app.staticform.app/settings) is where you manage your account, billing, notifications, API keys, and privacy controls. This page lists every setting available and what it does.

Account

Basic information about your user account.

• User ID: your unique identifier within StaticForm. You’ll need this when contacting support or debugging webhooks. Click the copy icon to copy it to your clipboard.
• Email Address: the email associated with your account. Changing your email redirects you to your identity provider, since authentication is handled externally.
• Password: changing your password also redirects you to your identity provider. StaticForm never stores your password directly.

Plan & Billing

Manage your subscription plan and payment history.

• Current Plan: the active subscription tier and its current price. You can change plan at any time (changes are prorated), or cancel your subscription. A cancelled subscription stays active until the end of the current billing period and can be reactivated before then.
• Email Usage: how many email actions have been sent this billing period (Starter plan). Visible only on Starter; Pro has unlimited email actions.
• Payment History: opens the Stripe Customer Portal, where you can download invoices, update payment methods, and see past charges.

Notifications

Control when StaticForm emails you about your account.

Submission Overview

A recurring digest that summarises activity across all your forms in one email: total submissions, legit versus spam, submit action outcomes (succeeded, failed, skipped), and a per-form breakdown of the busiest forms during the period.

• Send me a summary: choose Off, Daily, Weekly (default), or Monthly. The email always sends on the cadence you pick, even when there were zero submissions during the period (so you can see at a glance whether forms are quiet or active).
• The digest covers every form you have access to. That includes forms you own as well as forms shared with you (any form you can view as a collaborator).
• Want to stop the digest entirely? Set it to Off. You can turn it back on at any time without losing any submission history.

Submit Action Failures

• Submit action failure notifications (on by default): you and your form collaborators receive an email the moment a submit action ends in a failed state. The email includes the form name, action type, target, the exact error, and a direct link to the failed submission so you can retry. Disable this if you prefer to monitor failures only through the execution log.

Email Quota Alerts (Starter)

• Quota warning notification: you’ll automatically receive an email when your monthly email action usage approaches the 25,000 limit. This helps you decide whether to enable overage billing or upgrade to Pro before actions stop firing.

Click Save Settings to apply any changes.

API Keys

Create and manage API keys for programmatic access. API keys are used by integrations (like the WordPress plugin) and by your own scripts when calling the StaticForm API.

For each key you’ll see:

• Name: an optional label to help you identify the key (e.g. “WordPress – my-site.com”).
• Key hint: the last four characters of the key, used to identify it in the list. The full key is only shown once, at the moment of creation.
• Created: when the key was created.
• Last Used: timestamp of the most recent successful authentication, or Never if it has not been used yet.
• Expires: either a specific date or Never. Expired keys stop working automatically.
• Form access: how many forms the key is scoped to, or All forms if unrestricted.

Creating a key

Click Create API Key and configure:

• Name (required): a label to identify the key (e.g. “WordPress – my-site.com”).
• Expiration: choose a preset (1 day, 7 days, 30 days, 90 days, 1 year, Never) or pick a custom date and time.
• Form access: optionally restrict the key to one or more specific forms. When set, the key can only read, submit, and manage those forms; requests to any other form return a 403. Leave empty to allow access to all your forms. This is useful when issuing a key to a third-party integration or a specific site that should only touch a subset of your forms.
• Permissions: select which API operations the key is allowed to perform. By default a new key has no permissions; explicitly enable only the scopes your integration needs. Available scopes include reading/writing forms, submissions, and account data. Two quick-select presets are available:
  • WordPress: pre-selects exactly the permissions required by the StaticForm WordPress plugin (profile read, form list, form get, form submit). Use this when creating a key for a WordPress site. For added security, also set Form access to the single form your WordPress site uses.
  • Read-only: pre-selects all read-only scopes. Useful for scripts or integrations that only need to pull data, with no risk of accidental writes.

After clicking Create Key, the plain API key is shown once. Copy it immediately; you will not be able to see it again. If you lose a key, revoke it and create a new one.

Revoking a key

Click Revoke on any key to permanently disable it. Revoked keys can no longer authenticate, and integrations using them will stop working until they’re replaced.

See API Reference for how to actually use these keys in requests.

Integrations

Manage third-party connections used by submit actions.

Email Domains

Verify a custom domain so StaticForm can send email actions from an address on that domain (e.g. forms@yourdomain.com). Verification uses DKIM records published via Amazon SES.

From this section you can:

• Add domain: enter your domain name. StaticForm generates the required DKIM DNS records.
• View DNS records: open the DNS records modal to copy the CNAME records you need to add at your DNS provider. Optionally configure a custom MAIL FROM subdomain and a DMARC record for better deliverability.
• Recheck verification: poll the current status if you’ve recently updated your DNS records.
• Send test email: send a test message through the verified domain to confirm it’s working.
• Remove domain: deletes the domain and revokes any SES identity. Actions using this domain fall back to StaticForm’s default sender.

A domain can be in one of these states:

Status	Meaning
Pending	DNS records have been added but verification is not yet complete.
Verified	DKIM is confirmed and the domain can be used as a sender.
Failed	Verification failed. Recheck after re-adding the DNS records.

Once verified, select the domain in the Send from picker when configuring an email action.

SMTP Connections

Connect any SMTP server so email actions are delivered through your own infrastructure. Presets are available for common providers (AWS SES SMTP, Mailgun, SendGrid, Postmark, Resend, Brevo, Mailjet, Google Workspace, Microsoft 365, and others), or enter your host, port, and credentials directly.

From this section you can:

• Add connection: configure host, port, security (None / STARTTLS / SSL), username, password, From address, and From name. StaticForm verifies the connection before saving.
• Send test email: send a test message through the saved connection.
• Remove connection: deletes the connection. Actions using it fall back to StaticForm’s default sender.

Google Sheets

Connect one or more Google accounts to use the Google Sheets submit action. Each connection uses OAuth 2.0 and is scoped to the drive.file scope; StaticForm can only access sheets you explicitly select via the Google Picker.

From this section you can:

• Connect a Google account: opens the OAuth consent flow.
• View usage: see which forms use each connected account.
• Disconnect an account: if the account is in use by one or more forms, a conflict dialog lists those forms with options to disable or remove each usage first.

Data & Privacy

• Export Your Data: downloads a JSON archive of all your personal data: account information, forms, submissions, payment history, collaborations, and invitations. This fulfills your GDPR right to data portability (Article 20).
• Delete Account: permanently deletes your account, all your forms, submissions, and associated data. This is irreversible. You’re asked to re-type your email address to confirm.