Privacy Policy

1. Introduction

FormJet ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our form-building service at formjet.app (the "Service"). Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service.

2. Information We Collect

We collect information in the following ways:

• Account information: When you register, we collect your email address and a hashed password. We do not store plain-text passwords.
• Form data: We store the forms you create, including field definitions, design settings, and notification preferences.
• Submission data: When someone submits your form, we store the submitted data along with a timestamp and the submitter's IP address for rate-limiting and spam prevention purposes.
• Usage data: We may collect non-personally-identifiable information such as browser type, referring URLs, and pages visited to improve the Service.

3. How We Use Your Information

• To provide, operate, and maintain the Service
• To send you notifications you have configured (email, Telegram, webhooks)
• To prevent fraud, spam, and abuse through rate limiting
• To improve and personalize your experience
• To respond to your support requests
• To comply with legal obligations

4. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share data with:

• Service providers: Supabase (database and authentication), Vercel (hosting). These providers process data only as necessary to provide the Service and are bound by confidentiality obligations.
• Notification services: If you configure Telegram notifications or custom webhooks, submission data will be sent to those third-party endpoints you specify.
• Legal requirements: We may disclose data if required by law, regulation, or valid legal process.

5. Data Retention

We retain your account data for as long as your account is active. Submission data is retained until you delete it or delete the associated form. You may delete your account at any time, which will result in the deletion of all your forms and submissions.

6. Security

We implement industry-standard security measures including TLS encryption for data in transit, row-level security policies in our database, and rate limiting on public endpoints. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

7. Cookies

We use cookies solely for session management and authentication. We do not use cookies for advertising or tracking purposes. By using the Service, you consent to the use of these essential cookies.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Data portability (export your submissions via CSV)

To exercise these rights, please contact us at the address below.

9. Children's Privacy

The Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page with an updated date. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy, please contact us at: privacy@formjet.app