Privacy policy

FormDone determines the data required to create and protect accounts, provide the service and maintain its security. It acts as controller for that information.

The creator determines the questions, purpose, audience and required retention of responses. For collected content, the creator is the controller and the platform acts as processor under the creator’s lawful instructions.

Depending on how the service is used, we process:

• Account data: name, email address, hashed password, and creation or update dates.
• No-registration creation: a temporary browser-bound management identifier and its expiry date.
• Creator content: titles, descriptions, questions, options, dates, time zone, templates and versions.
• Responses: values submitted by each respondent and the submission date.
• FormDone feedback: rating, category and optional comment; an email address is collected only when the person requests and authorizes a reply.
• Security and operations data: session identifiers, temporary tokens, IP addresses used transiently for rate limits, and technical error or security logs.

Information is used only to:

• Create and manage accounts, sessions and account recovery.
• Create, publish, reuse and close forms; receive and export responses.
• Prevent fraud, spam, abusive automation and unauthorized access.
• Meet legal obligations and protect users, respondents and third parties.
• Maintain and improve technical stability without creating advertising profiles.
• Analyze feedback about the user experience and, only with authorization, reply to the email address provided for that purpose.

Creators must have a lawful purpose and obtain prior, express and informed authorization where required. They must identify themselves, explain intended uses, describe individual rights and provide a channel for requests.

Sensitive data and information about children require heightened review. Creators must not request them unless necessary, legally permitted and protected by appropriate safeguards.

We do not sell responses or account data and do not use them for advertising. Information may be processed by strictly necessary hosting, database, email or infrastructure providers bound by confidentiality and security duties; by authorities under a valid request; or by a successor operator in a reorganization that preserves these obligations.

Provider locations may involve international data transfers. The operator must verify and maintain the applicable contractual and legal safeguards.

Accounts, forms, templates and responses are retained while required to provide the service or until the user requests deletion, unless the law requires further retention. Deleting an account removes its forms, templates and responses from the active database.

Sessions have limited validity and recovery links expire after a few minutes. Security rate-limit and cache data are temporary. Applicable backup retention periods must remain documented and subject to controlled deletion.

For forms created without registration, submissions close when the chosen duration ends. Browser-based management access remains available for seven additional days to review or export responses and then becomes invalid. Creators must export information they need to retain beforehand.

Feedback is retained while needed to analyze and improve the service. Email addresses supplied for contact are used only to reply and must be deleted when no longer required for that purpose.

Applicable law may grant rights to access, update, correct or delete data; obtain evidence of authorization; learn how information is used; withdraw authorization where permitted; submit a complaint; and contact the competent data protection authority.

Registered users can update information and delete their account in Settings. Respondents should direct requests to the form creator, who determined the purpose and can identify the relevant response.

Material changes will be communicated reasonably before taking effect. The update date identifies the applicable version.