The privacy of your customer data is a shared responsibility. FullStory diligently ensures that your customer data is securely stored and accessible only to you. In addition, we provide you a tool to easily exclude sensitive customer information from ever crossing the wire. Within Settings, you'll notice an area named Privacy. You can enter CSS selectors there to block any data from those form elements from ever being captured.
Our Acceptable Use Policy requires you to block sensitive information, including (but not necessarily limited to) credit cards, government-issued ids, etc. Even if your website already stores this sort of data for its own functionality, it isn't relevant for FullStory, so we ask you not to transmit it to us.
Read more about the specifics of excluding elements using our traditional blocklist approach here. We also have a newer allowlist approach to managing recording rules called Private by Default which you can learn more about here.