Privacy Policy (draft)

DRAFT. For the owner to review before publishing. This text has not been reviewed by a lawyer and is a starting point only. It is not legal advice and makes no statement of compliance with any law or standard.

1. Who we are

[Owner: legal name, address and contact email of the company that operates FormFlow.]

2. What we collect

• Account data: name, email, and sign-in details (a password hash, or the identifier from Google, Atlas or your company's identity provider).

• Content you create: forms, designs, settings and integrations you configure.

• Responses: the answers people submit to your forms, plus metadata such as time, device type and, where enabled, approximate location. You decide what your forms ask.

• Billing data: handled by our payment provider; we receive plan and status, not card numbers.

• Usage and security logs: requests, errors, and sign-in activity.

3. How we use it

To provide and secure the Service, bill for it, support you, and improve it. [Owner: list any analytics or marketing use.]

4. Respondents' data

For responses to your forms you are generally the party deciding what is collected and why; we process it for you. [Owner: describe the data processing terms.]

5. Sharing

We share data with service providers that help run FormFlow (hosting, email, payments) and with integrations you choose to connect. [Owner: list providers.]

6. Cookies

We use cookies needed to keep you signed in and secure. [Owner: describe any others and the consent tool in use.]

The live list of every cookie and storage item, kept current by our consent tool (Cookie Munch):

7. Retention and deletion

[Owner: state retention periods and how to request deletion or export.]

8. Your rights

[Owner: describe how people can request access, correction, export or deletion.]

9. Contact

[Owner: add a contact email.]