Privacy notice
Draft. This notice is waiting for review and may change before it is final. Questions are welcome at support@formaverse.net.
Formaverse is a form builder. This page says what we collect, why, where it is kept and who helps us run the service.
Who is responsible for what
We are the controller of the data in your Formaverse account: your email address, your sign in and your workspace.
The person or team who made the form is the controller of the answers it collects. We are their processor. We store and show those answers for them, and use them for nothing else. If you filled in a form and want to see, change or delete your answers, ask the people who made it. We will help them answer you.
What we collect about you
- Your email address and password. The password is stored only as a hash.
- Your name, if you give one, and the workspaces you belong to. Members of a workspace see each other's names and email addresses.
- The forms you make, and the invites you send or receive.
- Your IP address when you sign up or sign in, passed to our database provider so it can limit repeated attempts. It may keep the address in its logs. Our own rate limit keeps only a one-way code of the address, and deletes it within about a day.
What we collect about people who fill in a form
The answers they give and when they gave them. We count that a form was opened, but that count holds no answer, no IP address and nothing that identifies the person.
To limit repeated opens and submissions, we keep a one-way code of their IP address, never the address itself, and delete it within about a day.
The people who made the form can choose to send its answers on to their own services, such as a webhook. What happens there is up to them.
Cookies
A public form sets no cookies, runs no analytics and loads nothing from other companies. This website sets no cookies either. Once you sign in, Formaverse uses its own cookies to keep you signed in and to remember choices such as your theme. None of them track you.
Where your data is kept
Your data is stored in the EU and encrypted in transit and at rest.
Email is the one exception. We send it through Resend, a US company, from its Ireland region. Resend handles the address, the subject and the message, and transfers rely on Standard Contractual Clauses. Our emails carry links, never form answers.
Who helps us run the service
A small number of providers process data for us. They are listed, with what they do and where, on our subprocessors page.
How long we keep it
We keep your data while your account is open. If you ask us to delete your account, we delete its data, and any copies in backups are gone once those backups expire.
Your rights
You can ask for a copy of your data, ask us to correct it, or ask us to delete it. You can download a form's responses at any time. You can also complain to your data protection authority.
Contact us
Email support@formaverse.net for any question about your data or this notice.