Privacy Policy (draft)
Last updated · Edition 1
DRAFT. For the owner to review before publishing. This text has not been reviewed by a lawyer and is a starting point only. It is not legal advice and makes no statement of compliance with any law or standard.
1. Who we are
[Owner: legal name, address and contact email of the company that operates FormFlow.]
2. What we collect
Account data: name, email, and sign-in details (a password hash, or the identifier from Google, Atlas or your company's identity provider).
Content you create: forms, designs, settings and integrations you configure.
Responses: the answers people submit to your forms, plus metadata such as time, device type and, where enabled, approximate location. You decide what your forms ask.
Billing data: handled by our payment provider; we receive plan and status, not card numbers.
Usage and security logs: requests, errors, and sign-in activity.
3. How we use it
To provide and secure the Service, bill for it, support you, and improve it. [Owner: list any analytics or marketing use.]
4. Respondents' data
For responses to your forms you are generally the party deciding what is collected and why; we process it for you. [Owner: describe the data processing terms.]
5. Sharing
We share data with service providers that help run FormFlow (hosting, email, payments) and with integrations you choose to connect. [Owner: list providers.]
6. Cookies
We use cookies needed to keep you signed in and secure. [Owner: describe any others and the consent tool in use.]
7. Retention and deletion
[Owner: state retention periods and how to request deletion or export.]
8. Your rights
[Owner: describe how people can request access, correction, export or deletion.]
9. Contact
[Owner: add a contact email.]