Introduction
FormSync (“we”, “our”, “us”) respects your privacy.
This Privacy Policy explains how we collect, use, and protect personal data
when you use FormSync and related services.
Information We Collect
We collect only the information necessary to provide and improve our services:
- Account Information: Name, email address, and authentication data
- Form Submission Data: Data submitted through forms created using FormSync
- Technical Data: IP address, timestamps, browser and device information
- Usage Data: Basic logs for performance, debugging, and security
How We Use Information
We use collected data to:
- Provide and maintain the FormSync service
- Process, store, and deliver form submissions
- Ensure platform security and prevent abuse
- Improve performance and reliability
- Communicate important service-related updates
We do not use your data for advertising or profiling.
Form Submissions
Form submission data is controlled by you.
- You act as the data controller
- FormSync acts as a data processor
We process submissions only according to your instructions.
You are responsible for informing your users how their data is collected and used.
For more details, see our Data Processing Agreement.
Cookies and Authentication
We use essential cookies and authentication mechanisms to:
- Maintain secure user sessions
- Enable login functionality (including Google OAuth)
- Protect accounts from unauthorized access
We do not use cookies for tracking or advertising.
See our Cookie Policy for more details.
Data Sharing
We do not sell or rent personal data.
We may share data with trusted subprocessors strictly to operate the service, including:
- Hosting providers (e.g., Vercel, VPS infrastructure)
- Database providers (e.g., MongoDB)
- Email delivery services (e.g., Resend)
- Authentication providers (e.g., Google OAuth)
See full list: Subprocessors
We may also disclose data if required by law.
Data Security
We implement appropriate technical and organizational measures, including:
- Encryption in transit (HTTPS)
- Secure authentication (JWT, OAuth)
- Rate limiting and API protection
- Access controls and monitoring
Data Retention
We retain data only as long as necessary to:
- Provide the service
- Maintain system integrity
- Comply with legal obligations
You may request deletion of your data at any time.
International Data Transfers
Your data may be processed in countries outside your jurisdiction.
We ensure appropriate safeguards are in place for such transfers.
Your Rights
Depending on your location, you may have rights to:
- Access your personal data
- Correct inaccurate data
- Request deletion
- Restrict or object to processing
To exercise these rights, contact us at legal@formsync.app.
Changes to This Policy
We may update this Privacy Policy from time to time.
Changes will be posted on this page.
Contact
If you have questions about this Privacy Policy, contact us at:
legal@formsync.app