Security & Privacy Policy

Introduction

FormCreatorAI is committed to safeguarding your privacy and the privacy of your respondents. We do not sell personal information. We collect and use data only to operate, improve, and secure our services. This Policy explains what we collect, how we use it, and the choices you have. By using FormCreatorAI, you acknowledge that you have read and agree to this Policy.

Scope: This Policy applies to the products and websites operated by FormCreatorAI. It does not apply to third-party services you connect to, or to organizations using our platform as separate, independent controllers of their respondents’ data.

Last updated: 23 September 2025

Information We Collect

The information we collect depends on how you use FormCreatorAI.

Account & Billing Information

When you create an account or subscribe, we may collect information such as your name, email address, organization, IP address, and other details you choose to provide. If you purchase a paid plan, our payment processor handles your payment details—FormCreatorAI does not store full credit card numbers.

Usage & Device Information

To operate and secure the service, we automatically collect technical data such as IP address, device and browser type, operating system, pages viewed, referrer, approximate location, timestamps, and product interaction events. This helps with performance, troubleshooting, fraud prevention, and product analytics.

Respondent Information

When respondents complete forms created on FormCreatorAI, we process the responses on your behalf. Depending on your settings, we may also log metadata (e.g., IP address, timestamps, user-agent, referrer) to provide security features (such as spam/abuse detection), analytics, and reliability.

Cookies & Similar Technologies

We use cookies and similar technologies to keep you signed in, remember preferences, measure performance, and prevent abuse. You can control cookies through your browser settings; some features may not function properly if cookies are disabled.

How We Use Information

• Provide, maintain, and improve the FormCreatorAI platform
• Detect, prevent, and investigate security incidents and abuse
• Measure performance and usage to guide product development
• Provide customer support and communicate important service updates
• Comply with applicable laws and enforce our Terms of Service

Where required by law, we rely on appropriate legal bases for processing (e.g., performance of a contract, legitimate interests, consent, and/or compliance with a legal obligation). When we process respondent data, we generally do so as a processor on your behalf.

Data Sharing & Transfers

We do not sell personal information. We may share limited data with trusted service providers (e.g., cloud hosting, analytics, payment processing) who process it on our instructions and subject to confidentiality and security obligations. We may disclose information if required by law or to protect our rights, users, or the public.

Your data may be processed in countries other than your own. Where applicable, we implement safeguards designed to protect personal information during international transfers.

Security

We employ a layered security program that includes encrypted transport (HTTPS), hardened infrastructure, access controls, monitoring, and periodic reviews. While no online service can guarantee absolute security, we continually improve our safeguards to help protect your information against unauthorized access, disclosure, alteration, or destruction.

Spam & Automated Submission Mitigation

To reduce fraudulent or automated submissions, we may use rate-limiting, behavioral signals, reputation checks, and other protective measures. Specific anti-abuse methods are adaptive and intentionally undisclosed to preserve effectiveness.

Data Retention

We retain personal information for as long as necessary to provide the service, comply with our legal obligations, resolve disputes, and enforce agreements. You may delete forms and responses from your account at any time; doing so will generally remove the associated data from active systems within a reasonable period, subject to backups and legal requirements.

Deleting Your Account & Data

You can delete your account and associated content from within the dashboard. Typical steps:

1. Sign in and open Account & Billing from the main menu.
2. If you have an active subscription, cancel it first.
3. Select Delete Account and confirm. This action is permanent and cannot be reversed.

If you need assistance or cannot access your account, please contact us using the details below. For security, we may request verification before processing deletion requests.

Payments

FormCreatorAI uses Stripe for secure payment processing. Payment details are transmitted directly to Stripe over encrypted connections and are not stored by FormCreatorAI. Stripe is responsible for the security of cardholder data it processes on our behalf.

Your Privacy Choices

• Access & Update: Manage your profile and settings in the dashboard.
• Export: Export form responses and data where available.
• Delete: Remove forms, responses, or your account as described above.
• Communications: Unsubscribe from non-essential emails via the link in the message.

Depending on your location, you may have additional rights under applicable laws (e.g., request access, correction, deletion, or objection/restriction of processing). We will respond to verified requests as required by law.

Children’s Privacy

Our services are not directed to children under the age where parental consent is required by local law. If you believe we have collected personal information from a child in violation of applicable law, please contact us so we can take appropriate steps.

Changes to This Policy

We may update this Policy from time to time. Material changes will be posted on this page with an updated “Last updated” date. Your continued use of the service after changes become effective constitutes acceptance of the revised Policy.

Contact Us

Questions or requests about this Policy or your data? Get in contact with us. We’ll respond as required by applicable law.

This Policy is provided for transparency and does not constitute legal advice. Terms capitalized but not defined here have the meanings given in our Terms of Service.