Privacy Policy

Formasty is a software platform that helps users create forms, collect submissions, automate workflows, and manage related data.

If you have any questions about this Privacy Policy or our privacy practices, you can contact us at support@formasty.com.

This Privacy Policy applies to:

• visitors to our website,
• users who create an account or use Formasty,
• people who submit information through forms built on Formasty,
• customers, prospects, and support contacts,
• people who interact with our communications, integrations, or services.

In some cases, Formasty acts as a data controller for information about our own customers, website visitors, and business contacts. In other cases, Formasty acts as a data processor on behalf of our customers when we process form responses and submission data through forms they create.

If you submit information to a form powered by Formasty, the organization that created that form may be the primary controller of your submission data, and you may need to review their privacy policy as well.

We may collect the following categories of information:

We collect information:

• directly from you when you create an account, fill out forms, contact us, or use the Services,
• automatically through logs, cookies, analytics, and device technologies,
• from third-party services you connect to Formasty,
• from payment processors, authentication providers, or service providers involved in operating the platform.

We use personal information for the following purposes:

• to provide, maintain, and improve Formasty,
• to create and manage user accounts,
• to host forms and process submissions,
• to power workflows, automations, notifications, and integrations,
• to provide customer support,
• to process payments and manage subscriptions,
• to secure the platform and detect fraud, abuse, or unauthorized access,
• to analyze usage and improve product performance,
• to communicate service updates, administrative notices, and support messages,
• to send marketing communications where permitted by law,
• to comply with legal obligations,
• to enforce our terms, policies, and other rights.

If GDPR, UK GDPR, or similar laws apply, we may rely on one or more of the following legal bases:

• Performance of a contract — when processing is necessary to provide the Services you request.
• Legitimate interests — for example, to secure and improve our Services, prevent misuse, and support ordinary business operations.
• Consent — where required, such as for certain cookies or marketing communications.
• Legal obligation — when we must process data to comply with applicable law.

We may share personal information with:

• hosting and infrastructure providers,
• payment processors,
• analytics providers,
• customer support and communication tools,
• authentication and security providers,
• integration partners and connected services you enable,
• professional advisers such as lawyers, auditors, and insurers,
• law enforcement or regulatory authorities when required by law,
• a buyer, investor, or successor entity in connection with a merger, acquisition, financing, restructuring, or sale of assets.

We do not sell personal information in the ordinary meaning of the word. If applicable law defines certain data-sharing for advertising or analytics as "sale" or "sharing," we will handle related rights requests in accordance with that law.

We retain personal information for as long as necessary to:

• provide the Services,
• maintain accounts and customer relationships,
• comply with legal, tax, accounting, and regulatory obligations,
• resolve disputes,
• enforce agreements,
• protect our legitimate business interests.

Retention periods vary depending on the type of data, the purpose for which it was collected, and legal requirements. When we no longer need personal information, we will delete it or anonymize it where reasonably possible.

Formasty may process and store information in countries other than the country where you live. If you are located in the EEA, UK, or other regions with data transfer rules, we will take steps designed to provide an adequate level of protection for personal information, such as using contractual safeguards where appropriate.

We use reasonable technical, administrative, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, and disclosure. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on your location, you may have rights such as:

• the right to access personal information,
• the right to correct inaccurate information,
• the right to delete personal information,
• the right to object to or restrict certain processing,
• the right to withdraw consent where processing is based on consent,
• the right to data portability,
• the right to opt out of certain uses of personal information,
• the right not to be discriminated against for exercising privacy rights.

If you want to exercise any of these rights, contact us at support@formasty.com. We may need to verify your identity before responding to your request. Some rights are subject to legal exceptions.

If you are a California resident, you may have rights under California privacy law, subject to eligibility and exceptions, including:

• the right to know what personal information we collect, use, disclose, sell, or share,
• the right to request deletion,
• the right to request correction,
• the right to opt out of sale or sharing, if applicable,
• the right to limit certain uses of sensitive personal information, if applicable,
• the right to non-discrimination for exercising your privacy rights.

To submit a request, contact us at support@formasty.com.

We do not sell or share personal information for cross-context behavioral advertising.

We may use cookies, pixels, local storage, and similar technologies to:

• keep you signed in,
• remember preferences,
• understand site and product usage,
• improve functionality,
• measure performance,
• support security.

Where required by law, we will request consent before using non-essential cookies. You can usually control cookies through your browser settings. If we provide a cookie banner or preference center, you can also manage your preferences there.

Our Services may link to or integrate with third-party services. We are not responsible for the privacy, security, or content practices of third parties. Your use of those services is subject to their own terms and privacy policies.

Formasty is not intended for children under 13, and we do not knowingly collect personal information directly from children under 13 through our own Services. If we learn that we have collected such information without appropriate authorization, we will take steps to delete it.

When our customers use Formasty to collect and manage submissions, Formasty may act as a processor or service provider on their behalf. In such cases:

• the customer controls the forms they create and the data they collect,
• the customer is responsible for determining their legal basis for collection and providing necessary notices,
• Formasty processes such data according to the customer's instructions, our agreements, and applicable law.
• Formasty does not support special-category or high-risk personal data by default without an explicit enterprise review path.

Customers should avoid collecting special-category data unless they have completed their own legal review and Formasty has expressly agreed to that processing path in writing.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date above. If changes are material, we may provide additional notice, such as through the website or by email where appropriate.