Introduction
This Data Processing Agreement (“DPA”) forms part of the Terms of Service
between you (“User”, “Controller”) and FormSync (“we”, “our”, “us”, “Processor”).
This DPA applies when FormSync processes personal data on your behalf
as part of providing the FormSync service.
Roles and Responsibilities
- Controller (You): Determines the purpose and means of processing personal data.
- Processor (FormSync): Processes personal data only on your behalf and according to your instructions.
FormSync does not own or control the data submitted through your forms.
Data We Process
Depending on how you use FormSync, we may process:
- Form submission data (e.g., names, emails, messages)
- Metadata (e.g., timestamps, IP addresses)
- Account-related information
You are responsible for ensuring that you have the legal right to collect and process this data.
Purpose of Processing
We process personal data solely to:
- Receive and store form submissions
- Deliver data to your configured endpoints or dashboard
- Maintain and improve service reliability and security
We do not use submitted data for advertising or profiling.
Data Security
We implement appropriate technical and organizational measures to protect data, including:
- Encryption in transit (HTTPS)
- Secure infrastructure and access controls
- Monitoring and protection against unauthorized access
Subprocessors
We may use trusted third-party service providers (“Subprocessors”)
to operate and improve FormSync.
A list of subprocessors is available at:
Subprocessors
Data Retention
We retain personal data only as long as necessary to provide the service
or as required by law.
You can request deletion of your data at any time.
User Rights
You (as Controller) are responsible for handling data subject requests, including:
- Access
- Correction
- Deletion
- Data portability
FormSync will assist where reasonably required.
International Transfers
Data may be processed in countries outside your jurisdiction.
We ensure appropriate safeguards are in place for such transfers.
Termination
Upon termination of your account:
- Data may be deleted or made inaccessible within a reasonable period
- You may request data export before deletion
Changes to This Agreement
We may update this DPA from time to time.
Updates will be posted on this page.
Contact
For any questions regarding this DPA, contact us at:
legal@formsync.app