Send form submissions to Google Sheets

FormHeron does not have a native Google Sheets integration. That is deliberate scope, not a vague roadmap claim. You connect Sheets through a signed webhook and an automation tool (Zapier, Make, or n8n).

Why not native Sheets

Native connectors multiply OAuth surfaces, failure modes, and support load. A webhook is one primitive that also reaches Notion, Airtable, HubSpot, and custom APIs. Honesty beats a fake “200 integrations” badge.

Recipe

1. Upgrade to Indie or Pro so webhooks are available
2. Create a webhook endpoint on your form; save the signing secret (shown once)
3. In Zapier/Make/n8n, create a catch-hook or custom webhook trigger
4. Point FormHeron at that HTTPS URL; verify the HMAC if the tool allows a code step
5. Map payload fields to spreadsheet columns
6. Submit a test lead and confirm the new row

Verify signatures with how to verify webhook signatures. Retries (1m / 5m / 25m) cover flaky automation endpoints; after three failures FormHeron dead-letters and emails you.

Field mapping tips

• Use stable field names in the form (email, name, message) so columns do not drift
• Payload is flat strings — no nested objects on submit
• Store submission id as a column for idempotent updates if you reprocess

Security

Only accept https webhooks. FormHeron re-validates SSRF on every delivery (no private IPs, port 443 only). Treat the signing secret like a password. Automation platform credentials are outside FormHeron — manage them in Zapier/Make.

Example Zap shape

1. Trigger: Catch Hook (raw body available if you verify signatures)
2. Optional: Code step to verify HMAC-SHA256(timestamp + '.' + body)
3. Action: Google Sheets → Create Spreadsheet Row
4. Map email, name, message, id, createdAt to columns
5. Filter: only continue if status is not spam (spam should never arrive via webhook)

If your automation tool cannot verify signatures, restrict the catch URL secrecy and rotate it if leaked — but prefer tools that allow a code step. FormHeron still signs every delivery.

Idempotency in Sheets

Retries can deliver more than once. Store submission id in a column and skip duplicates, or use an upsert pattern in Make/n8n. Do not assume exactly-once delivery across the public internet.

More: integrations, docs webhooks, pricing.