Privacy Policy

2. Information We Collect

We collect information that you provide directly to us, including:

• Account information (name, email address)
• Project information and client details
• Conversation data from client discovery sessions
• Usage data and analytics
• Subscription and billing information (processed by Paddle)

3. How We Use Your Information

We use the information we collect to:

• Provide and maintain our service
• Process and analyze client conversation responses
• Generate insights and synthesis reports for designers
• Communicate with you about your account
• Improve our service and develop new features

4. Payment Data Processing

Payment and billing information is processed by Paddle.com Market Ltd ("Paddle"), our authorized reseller and Merchant of Record. When you subscribe to a paid plan:

• Paddle collects and processes your payment information directly
• We do not store your credit card or payment details on our servers
• Paddle handles all payment processing, tax calculation, and invoicing
• We receive only minimal information from Paddle (subscription status, billing dates) to provide the Service
• Paddle's privacy practices are governed by their Privacy Policy

5. Data Security

We implement appropriate security measures to protect your personal information. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

6. Third-Party Processors

We use the following third-party services to operate our platform. Each processor handles your data only as necessary to provide their service:

• Clerk — Identity and authentication provider (sign-in, account management)
• Resend — Email delivery service (transactional emails, notifications)
• Paddle — Payment processing and subscription billing (paid plans only)
• PostHog — Product analytics and session insights (usage behavior, funnel tracking)
• Axiom — Log management and infrastructure monitoring

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Account data is retained for the duration of your account. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law. Client conversation data is retained for the duration of the associated project.

Data is processed and stored on servers located within the European Economic Area (EEA).

8. Your Rights (GDPR)

If you are located in the European Economic Area, you have the following rights regarding your personal data:

• Right of access — Request a copy of the personal data we hold about you
• Right to rectification — Request correction of inaccurate or incomplete data
• Right to erasure (right to be forgotten) — Request deletion of your personal data. We will process erasure requests manually and respond within 30 days. To submit a request, email hello@formform.net with the subject line "Data Erasure Request."
• Right to data portability — Request your data in a structured, machine-readable format
• Right to object or restrict processing — Object to certain processing activities

To exercise any of these rights, contact us at hello@formform.net.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us at hello@formform.net.