1. Scope and roles
This policy describes how Formora processes information when you visit useformora.com, create an account, build or answer a form, upload a file, make a payment, subscribe, or contact us. For information collected through a customer-created form, that customer is generally the controller or business deciding why the information is collected, and Formora acts as its service provider or processor.
2. Information we collect
| Category | Examples | Purpose |
|---|---|---|
| Account information | Email address, display name, Google sign-in identifier, profile image | Authentication, account support and security |
| Form content | Drafts, published forms, settings, responses, signatures and uploaded files | Create, publish and operate forms |
| Billing information | Plan, subscription status, transaction and provider references | Activate plans, reconcile payments and prevent fraud |
| Technical information | IP-derived security signals, browser/device data, timestamps and error logs | Operate, secure and improve the service |
| Communications | Feedback, support requests and notification preferences | Respond to requests and improve Formora |
Payment card, bank and PayPal credentials are entered directly with the relevant payment provider and are not stored by Formora.
3. How we use information
- Provide, maintain and secure Formora.
- Save and synchronize forms, responses and account preferences.
- Process subscription status and payment confirmations.
- Send service messages or notifications you enable.
- Prevent spam, abuse, fraud and security incidents.
- Diagnose problems, analyze service performance and improve features.
- Comply with law and enforce our Terms.
4. Legal bases
Depending on your location, we rely on performance of a contract, legitimate interests in operating and securing the service, consent where requested, and compliance with legal obligations.
5. Service providers and disclosures
We use service providers including Supabase for authentication, databases and storage; Vercel for hosting; Google for optional sign-in; PayPal and Stripe for payments; and Resend for email delivery. They process information under their own terms and applicable data-protection obligations. We may also disclose information when legally required, to protect rights and safety, or as part of a merger or acquisition with appropriate safeguards.
6. International transfers
Formora and its providers may process information in countries other than yours. Where required, we rely on recognized transfer safeguards or provider contractual protections.
7. Retention
We retain account and service information while your account is active and for a reasonable period afterward for security, dispute resolution, backups and legal compliance. Form owners can delete responses, and account holders can request account deletion. Backup copies may remain temporarily until routine deletion cycles complete.
8. Your choices and rights
Depending on applicable law, you may request access, correction, deletion, portability, restriction, or objection. You may export form responses and delete your account from Account settings. Form respondents should normally contact the creator of the form first because that creator controls the submitted content.
9. Security
We use access controls, row-level database policies, encrypted transport, signed uploads, rate limits and limited-access service credentials. No online service can guarantee absolute security.
10. Children
Formora is not directed to children under 13, and customers must not knowingly collect children’s information without a lawful basis and appropriate consent.
11. Changes
We may update this policy as the product or law changes. Material changes will be posted here with a revised effective date.