Privacy Policy

2. Information We Collect

We collect information that you provide directly to us, including:

• Account information (name, email address)
• Project information and client details
• Conversation data from client discovery sessions
• Usage data and analytics
• Subscription and billing information (processed by Paddle)

3. How We Use Your Information

We use the information we collect to:

• Provide and maintain our service
• Process and analyze client conversation responses
• Generate insights and synthesis reports for designers
• Communicate with you about your account
• Improve our service and develop new features

4. Payment Data Processing

Payment and billing information is processed by Paddle.com Market Ltd ("Paddle"), our authorized reseller and Merchant of Record. When you subscribe to a paid plan:

• Paddle collects and processes your payment information directly
• We do not store your credit card or payment details on our servers
• Paddle handles all payment processing, tax calculation, and invoicing
• We receive only minimal information from Paddle (subscription status, billing dates) to provide the Service
• Paddle's privacy practices are governed by their Privacy Policy

5. Data Security

We implement appropriate security measures to protect your personal information. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

6. Third-Party Processors

We use the following third-party services to operate our platform. Each processor handles your data only as necessary to provide their service. For each processor, we list its purpose, the data it receives and its location. We also list the transfer basis for data that leaves the European Economic Area (EEA):

• OpenAI: AI models that run client interviews and the designer workspace chat, extract evidence from conversations, synthesize and analyze projects, write Briefs and build search indexes. It receives conversation messages, workspace chat messages, the images you upload to the chat, and project and client details. Location: United States. Transfer basis: Standard Contractual Clauses.
• Clerk: Sign-in and account management. It receives your name, email address, sign-in details and device information. At sign-in, Clerk uses Cloudflare Turnstile to block bots. Turnstile receives your IP address and browser details. Location: United States. Transfer basis: EU-US Data Privacy Framework.
• Paddle: Payment processing and subscription billing (paid plans only). It receives your name, email address, billing address and payment details. Location: United Kingdom. Transfer basis: the European Commission's adequacy decision for the United Kingdom.
• Resend: Email delivery (account emails, invitations, notifications). It receives the recipient's name and email address and the content of each email. Location: EU (Ireland). Resend is a US company and can process this data in the United States. Transfer basis: EU-US Data Privacy Framework.
• Cloudflare: File storage (R2) for the files you upload: images in the workspace chat and screenshots in product reports. It receives the uploaded files. Location: EU. Cloudflare is a US company.
• Railway: Hosting for our database and for Umami, our web analytics. The database stores your account, project and conversation data. Umami receives the pages you visit, browser details and your IP address. Location: EU. Railway is a US company.
• Vercel: Hosting for the app, and page speed measurement (Speed Insights). It receives every request to the app, including your IP address and the pages you visit. Location: the app runs in Paris, France. Vercel is a US company and can process this data in the United States. Transfer basis: EU-US Data Privacy Framework.
• PostHog: Product analytics and session recordings. In your browser, it runs only if you accept in the cookie banner, and never on a Client's invite and interview pages. It receives the pages you visit, your clicks, and session recordings with all text and form inputs masked. After you sign in to the app, it also receives your account ID, name and email address. Our servers send it product actions, such as a new project or a client invitation, with your account ID. They also send interview events that hold only record IDs and numbers. Location: EU (Germany). PostHog is a US company.
• Sentry: Error and performance monitoring. It receives the details of each error and performance data for a sample of requests. Both include the page or request and browser details. Error messages can include personal data. Location: EU (Germany). Sentry is a US company.
• Axiom: Server logs and monitoring. It receives log entries, which can include your account ID, request details and error messages. Location: EU (Germany). Axiom is a US company.
• Upstash: Rate limits and background jobs. It receives your account ID or IP address for rate limits. Background jobs send it conversation messages, project and client details, and record IDs. Location: EU (Germany). Upstash is a US company.
• GitHub: Tracking of the product reports you send us, and the nightly backup of our database. For a report, it receives the text of your report, the page address and browser details, but not your name or email address. For the backup, it receives a copy of the database while the backup runs. The copy is encrypted before it leaves GitHub's server. Location: United States. Transfer basis: EU-US Data Privacy Framework.

Some processors are outside the EEA, most of them in the United States. Each transfer outside the EEA has one of three transfer bases. The EU-US Data Privacy Framework covers a certified US processor. The Standard Contractual Clauses of the European Commission cover a processor that is not certified. An adequacy decision of the European Commission covers the United Kingdom. To get a copy of a transfer basis, email hello@formform.net.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Account data is retained for the duration of your account. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law. Client conversation data is retained for the duration of the associated project. We keep backups of our database so that we can recover from a failure. Data that we erase leaves these backups within 90 days.

8. Your Rights (GDPR)

If you are located in the European Economic Area, you have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure (right to be forgotten): Request deletion of your personal data. We will process erasure requests manually and respond within 30 days. To submit a request, email hello@formform.net with the subject line "Data Erasure Request."
• Right to data portability: Request your data in a structured, machine-readable format
• Right to object or restrict processing: Object to certain processing activities. Our servers send product analytics about your account to PostHog without asking for consent, under our legitimate interest. To object to it, email hello@formform.net.

To exercise any of these rights, contact us at hello@formform.net.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us at hello@formform.net.