Privacy
Policy

1. Introduction

Forminos ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.

This policy applies to all users of the Forminos platform, including form creators (our direct customers) and form respondents (end users who fill out forms created with Forminos).

2. Information We Collect

2.1 Information You Provide

• Account information: Name, email address, password, and billing details when you create an account or subscribe to a paid plan.
• Form content: The forms you create, including questions, logic, design configurations, and settings.
• Payment information: Credit card or payment method details, processed securely through our third-party payment processor. We do not store full card numbers on our servers.
• Communications: Any messages, feedback, or support requests you send to us.

2.2 Information Collected Automatically

• Usage data: Pages visited, features used, form analytics (completion rates, time spent, drop-off points).
• Device information: Browser type, operating system, device identifiers, and screen resolution.
• Log data: IP address, access times, referring URLs, and error logs.
• Cookies and similar technologies: We use essential cookies for authentication and functionality, and optional analytics cookies with your consent.

2.3 Form Response Data

When end users submit responses to forms created with Forminos, we process that data on behalf of the form creator. The form creator is the data controller for response data; Forminos acts as a data processor. The nature and sensitivity of this data depends entirely on the form creator's configuration.

3. How We Use Your Information

We use collected information to:

• Provide, operate, and maintain the Service
• Process subscriptions, payments, and billing
• Send transactional emails (account confirmations, billing receipts, security alerts)
• Provide customer support and respond to inquiries
• Analyze usage patterns to improve features and user experience
• Detect, prevent, and address fraud, abuse, or technical issues
• Comply with legal obligations

We do not sell your personal data to third parties. We do not use form response data for advertising or profiling purposes.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area, our legal bases for processing your data include:

• Contract performance: Processing necessary to provide the Service you signed up for.
• Legitimate interests: Improving our Service, preventing fraud, and ensuring security, where these interests are not overridden by your rights.
• Consent: Where you have given explicit consent, such as for marketing emails or optional analytics cookies.
• Legal obligation: Processing required to comply with applicable laws.

5. Data Sharing & Third Parties

We may share your information with:

• Service providers: Cloud hosting, payment processing, email delivery, and analytics providers who process data on our behalf under strict contractual obligations.
• Legal requirements: When required by law, court order, or governmental authority.
• Business transfers: In connection with a merger, acquisition, or sale of assets, with appropriate notice.

All third-party processors are vetted for GDPR compliance and bound by data processing agreements.

6. Data Retention

We retain your account data for as long as your account is active or as needed to provide the Service. After account deletion, we retain data for up to 30 days for recovery purposes, after which it is permanently deleted.

Form response data is retained according to the form creator's settings and our data retention policies. Form creators may delete response data at any time through the platform.

Billing records are retained for the period required by applicable tax and accounting laws (typically 7 years).

7. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS 1.2+), encryption at rest, access controls, regular security audits, and secure development practices. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data ("right to be forgotten").
• Portability: Request your data in a structured, machine-readable format.
• Restriction: Request that we limit processing of your data.
• Objection: Object to processing based on legitimate interests.
• Withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise these rights, contact us at privacy@forminos.com. We will respond within 30 days.

9. Cookies

We use the following types of cookies:

• Essential cookies: Required for authentication, security, and core functionality. Cannot be disabled.
• Analytics cookies: Help us understand how users interact with the Service. Enabled only with your consent.

We do not use advertising or tracking cookies. You can manage cookie preferences through your browser settings or our cookie consent banner.

10. International Data Transfers

Your data may be processed in countries outside the EEA. In such cases, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, or adequacy decisions.

11. Children's Privacy

The Service is not directed to children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a notice on the Service. Your continued use after changes take effect constitutes acceptance of the revised policy.

13. Contact

For privacy-related questions or concerns, contact our Data Protection Officer at privacy@forminos.com.