Legal

Privacy Policy

This policy explains what information Formserve collects, how we use it, how long we keep it, and the choices you have over your data.

Effective date

June 5, 2026

Formserve is owned and operated by JOHO DIGITAL FZE, B.C 1308805, Business District, Ajman Free Zone, United Arab Emirates. Formserve operates a form backend, submission inbox, integrations, file handling, and team-access features for account holders. We collect only the information needed to run those features, protect the service, and support billing and account administration.

1. Who we collect data from

  • Account holders who create and manage Formserve accounts.
  • Team members who are invited to access selected endpoints or workspaces.
  • Form submitters who send data through forms powered by Formserve.

2. Information we collect

Account and billing information

  • Name, email address, login credentials, and profile details you provide.
  • Billing and subscription metadata, including plan selection and payment status.
  • Payment information is processed by Stripe; Formserve does not store full card details.

Submission data

  • Fields submitted through your forms, including text, email addresses, and other form values.
  • Uploaded files when file uploads are enabled for the endpoint.
  • Spam-protection data such as IP address, user-agent, honeypot input, and related request metadata.

Usage and technical data

  • Basic service logs, feature usage, and internal diagnostics.
  • Cookies and similar technologies used for authentication, preferences, analytics where enabled, and attribution.
  • Campaign attribution details such as UTM source, medium, campaign, content, term, referrer, landing path, and first-touch or last-touch timestamps.

3. How we use information

  • To operate the service, process form submissions, and show submission history in the dashboard.
  • To send notifications, warnings, confirmations, and other account-related email.
  • To process billing and subscription changes.
  • To provide integrations such as email delivery, webhooks, Slack, Discord, WhatsApp, HubSpot, Mailchimp, Google Sheets, Airtable, Notion, and file storage.
  • To detect spam, abuse, and security issues.
  • To understand public website usage, measure campaign performance, and improve the product.

4. Analytics and attribution

We may use Google Analytics or similar analytics tools on public pages such as the marketing website, documentation, blog, pricing, and no-signup test endpoint flow when analytics is configured. We do not load Google Analytics on signed-in dashboard or app pages.

We also use first-touch and last-touch attribution to understand which public campaigns or referrers led to a signup or test endpoint. This attribution may include UTM parameters, referrer, landing path, and timestamps. The browser may temporarily store this attribution so it can be attached when you create a test endpoint or sign up.

Attribution data is used for product analytics, marketing measurement, and fraud or abuse review. You may request deletion or export of attribution data associated with your account as part of your account data.

5. Storage, retention, and deletion

  • Submission data is retained according to your active plan's retention period unless a different period is shown in your account or agreed in writing.
  • When data reaches its retention limit, Formserve may send warning emails before automatic deletion.
  • Unverified accounts with no active setup or retained usage may be removed automatically after 30 days to reduce abuse, bounced email, and dormant account clutter.
  • Data beyond a plan limit may become inaccessible when your plan changes or your account is canceled, and may be deleted after the applicable retention or grace period.
  • We may retain records needed for billing, fraud prevention, security, legal compliance, and dispute resolution.
  • You can export data before it is removed; you are responsible for keeping your own backups if you need longer retention.

6. File uploads

When file uploads are enabled, uploaded files are stored in Amazon S3. Form uploads, feedback images, and blog images are not stored on Formserve's application container disk. Submission attachments are kept as private S3 objects and are accessed through time-limited download links or stored metadata references.

Uploaded files are accessible to the account holder and any team members or integrations you authorize. It is your responsibility to handle uploaded content in compliance with applicable law.

7. Sharing and third-party processors

We share data only as needed to operate the service, including with payment processors, email providers, analytics tools, hosting and storage providers, and any integrations you explicitly connect. Those providers may process data on our behalf or at your direction.

We may also disclose information if required by law, to enforce our terms, to protect the rights and security of Formserve, or to respond to valid legal requests.

8. Team access and workspaces

If you invite team members or use client workspaces, those users can view and act on data within the access you grant them. You are responsible for managing that access and for the actions taken under your account.

9. Security

  • We use access controls, encrypted transport, and operational safeguards designed to protect data.
  • No system is perfectly secure, and we cannot guarantee absolute security.

10. Your rights and choices

  • You may access, update, or delete certain account information through the app or by contacting support.
  • You may request export or deletion of your data, including account-level attribution data, subject to legal, billing, security, and retention obligations.
  • You can opt out of non-essential product or marketing messages where applicable.

11. Children’s privacy

Formserve is not intended for children under 13, and we do not knowingly collect personal information from children under 13.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will post the updated version here and update the effective date.

13. Contact

For questions or requests related to this policy, contact support@formserve.io.

Business address: JOHO DIGITAL FZE, B.C 1308805, Business District, Ajman Free Zone, United Arab Emirates.