Security & Privacy

We collect information you provide directly when you create an account, build forms, or contact us. This includes: • Account & Billing Information: Name, email address, and payment details (processed by Stripe). • Usage & Device Data: Browser type, IP address, pages visited, and feature usage to improve our service. • Respondent Data: Information submitted through your forms by respondents. You are the data controller for this content. • Cookies: We use essential cookies for authentication and optional analytics cookies. You can control cookie preferences in your browser settings.

We use collected information to: • Provide, maintain, and improve FormCreator AI services. • Process transactions and send related information. • Send technical notices, updates, and security alerts. • Respond to your comments, questions, and customer service requests. • Monitor and analyze trends, usage, and activities. • Detect, investigate, and prevent fraudulent or unauthorized activity. • Personalize and improve your experience. We do not sell your personal information. We do not use your form response data for advertising purposes.

We share information only in these limited circumstances: • Service Providers: With vendors who assist in providing our services (hosting, payment processing, email delivery), under strict data processing agreements. • Legal Requirements: When required by law, subpoena, or governmental request. • Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to affected users. • With Your Consent: When you explicitly direct us to share information. We do not share form respondent data with third parties for their own purposes.

We employ multiple layers of protection against spam and automated submissions: • Rate limiting on form submissions. • Bot detection and blocking mechanisms. • Duplicate submission prevention. • Optional access controls (password protection, authenticated access). These protections help ensure you receive genuine, high-quality responses.

• Account data is retained for as long as your account is active. • Form response data is retained according to your plan settings and can be deleted at any time. • After account deletion, your data is permanently removed within 30 days, except where retention is required by law. • Anonymized, aggregated data may be retained for analytics purposes.

You can delete your account and all associated data at any time from your account settings. When you delete your account: • All forms, submissions, and personal data are permanently deleted within 30 days. • Active subscriptions are cancelled immediately. • This action cannot be undone. To request data deletion without deleting your account, contact our support team.

All payment processing is handled by Stripe, Inc. We never store credit card numbers on our servers. Stripe is PCI Level 1 certified — the highest level of certification in the payments industry. For more information, see Stripe’s privacy policy at stripe.com/privacy.

You have the following rights regarding your personal information: • Access: Request a copy of the personal information we hold about you. • Correction: Request correction of inaccurate personal information. • Deletion: Request deletion of your personal information. • Portability: Request your data in a portable format. • Opt-out: Unsubscribe from marketing communications at any time. To exercise any of these rights, contact us at the email address below.

FormCreator AI is not intended for children under 16. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us immediately.

We may update this policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the “Last updated” date. Continued use of the service after changes constitutes acceptance of the updated policy.