Privacy Policy

FormsLab ("FormsLab", "we", "us") respects your privacy. This Privacy Policy explains what personal data we collect when you use FormsLab at formslab.app, how we use it, and your rights.

1. Who is responsible for your data?

For the FormsLab service and account data, the data controller is FormsLab.

When you purchase a paid subscription, Paddle (Paddle.com Market Limited) acts as Merchant of Record and processes payment and billing data under its own privacy policy: Paddle Privacy Policy. We do not store your full payment card details.

2. Data we collect

2.1 Account data

• Email address and authentication identifiers (via Firebase Auth)
• Name or profile information if you provide it or sign in with Google
• Workspace and team membership information

2.2 Service data

• Forms, fields, settings, and styling you create
• Form submissions and uploaded files from respondents
• Integration configuration (e.g. connected spreadsheet IDs)
• Usage data such as feature interactions and error logs

2.3 Respondent data

If you publish a form, you are responsible for telling respondents what you collect and why. We process submission data on your instructions as a processor/service provider to deliver the Service.

2.4 Payment data

Paddle collects billing name, address, payment method, and transaction history. We may receive limited billing metadata (e.g. subscription status, plan, customer ID) from Paddle to provision your account.

3. How we use data

• Provide, maintain, and improve the Service
• Authenticate users and enforce plan limits
• Sync submissions to integrations you configure
• Send service-related emails (e.g. notifications you enable)
• Respond to support requests and legal obligations
• Prevent fraud, abuse, and security incidents

4. Legal bases (EEA/UK)

Where GDPR applies, we rely on:

• Contract — to provide the Service you signed up for
• Legitimate interests — security, analytics, and product improvement (balanced against your rights)
• Consent — where required (e.g. optional marketing)
• Legal obligation — tax, accounting, and compliance

5. Sharing with third parties

We use trusted providers to operate the Service, including:

• Google Firebase — authentication, database, and file storage
• Google / Microsoft APIs — when you connect Sheets or Excel integrations
• Paddle — subscription billing and payments
• Email (SMTP) providers — when you send notification emails
• Hosting and infrastructure — to run our application

We share only what is necessary for each provider to perform their function. We do not sell your personal data.

6. International transfers

Your data may be processed in countries outside your own. Where required, we use appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms.

7. Retention

We retain account and form data while your account is active. You may delete forms and submissions from your dashboard. We may retain certain records after account closure where required for legal, security, or backup purposes.

8. Security

We implement technical and organisational measures appropriate to the risk, including encryption in transit, access controls, and secure authentication. No method of transmission over the Internet is 100% secure.

9. Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, or port your personal data, and to object to certain processing. You may also withdraw consent where processing is consent-based.

To exercise rights relating to FormsLab account data, contact support@formslab.app. For payment data, contact Paddle via your receipt or paddle.net.

You may lodge a complaint with your local data protection authority if you believe our processing violates applicable law.

10. Cookies and similar technologies

We use essential cookies and local storage for authentication and session management. We do not use third-party advertising cookies on the creator dashboard.

11. Children

The Service is not directed at children under 16. We do not knowingly collect personal data from children.

12. Changes

We may update this Privacy Policy. The "Last updated" date at the top will change when we do. Material changes may be communicated by email or in-app notice.

13. Contact

FormsLab
Email: support@formslab.app

See also our Terms of Service and Refund Policy.