Privacy policy
This explains what Formset collects, why, and what you can do about it. It is written to be read, not to be survived.
1. Who we are
Formset is a form builder you operate through a conversation with an AI assistant. You describe a form, we host it, respondents fill it in a browser, and you ask us for the answers. The service runs at getformset.com.
Formset is operated by [COMPANY LEGAL NAME], [BUSINESS ADDRESS]. For anything in this policy, write to [SUPPORT EMAIL].
2. What Google tells us when you sign in
Google is the only way to sign in to Formset. There is no password. Sign-in happens once, when your assistant first connects to Formset. We ask Google for exactly three permissions, all of which Google classes as non-sensitive:
That is the whole list. We do not request access to Gmail, Drive, Calendar, Contacts, Photos, or any other Google service, so we cannot read them even if we wanted to.
3. Google API Services Limited Use
Formset's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In practice: we use what Google gives us to sign you in and to identify your account. We do not transfer it to anyone else, we do not use it for advertising, and no human at Formset reads it except when you ask us for support or the law requires it.
4. What we store
Your account. Your Google account identifier, email address, name, and profile picture URL, plus the sign-in sessions and access tokens that keep you connected.
Your forms. The title, description, settings, and fields of every form you create, and each earlier version of it, so a form that has already been filled in keeps its shape.
The answers people send you. Whatever your respondents type into your form, plus a small amount of technical information about each submission: an irreversible hash of the sender's IP address, the browser user agent, the referring page, the country, and how long the form took to complete. We keep those to catch spam and abuse, not to build a profile of anyone. We do not store raw IP addresses against submissions.
Abuse reports. If someone reports one of your forms, we store the report, the reason given, and a hash of the reporter's IP address.
Operational logs. Which tool ran, for which account and form, how long it took, and whether it succeeded. Logs never contain the contents of a form or an answer.
5. What we never do
- We do not send your forms or answers to a language model. Formset makes no model calls of its own. The conversation happens in your assistant, on your side; we store data and return it when your assistant asks on your behalf.
- We do not sell or rent personal information to anyone, for any purpose.
- We do not run advertising or third-party tracking on the forms your respondents see. A hosted form loads nothing from an ad network.
- We do not use your answers to train anything.
6. Answers people send you
When someone fills in a form you made, you decide what to ask and what to do with the replies. Under data protection law that usually makes you the controller of those answers and Formset the processor acting for you.
So it is on you to tell your respondents who you are and why you are asking, and to have a lawful reason for collecting what you collect. It is on us to keep the answers safe, to hand them only to you, and to delete them when you say so.
If a respondent contacts us directly about their answers, we point them to the person who made the form, unless we are legally required to act ourselves.
7. Who else sees it
We use a small number of companies to run the service. They only get what they need to do their part:
We also disclose information when the law requires it, and we would tell you first unless we are forbidden to. If Formset is ever sold or merged, your data moves with the service and this policy travels with it until we tell you otherwise.
8. How long we keep it
- Answers on the free plan are deleted 90 days after they arrive. On a paid plan they stay until you delete them.
- A form you delete is hidden immediately and permanently erased 30 days later, along with its answers. Within that window you can ask us to bring it back.
- Your account is erased when you ask us to close it, and your forms and answers go with it.
- Operational logs are kept for a short period for security and debugging, then rotated out.
9. Your choices
- Cut off our Google access at any time at myaccount.google.com/permissions. Your assistant will not be able to reach Formset afterwards, and your data stays until you ask us to delete it.
- Get a copy of any form's answers as CSV, or JSON on a paid plan, by asking for an export in your assistant.
- Delete a form, its answers, or your whole account by asking in your assistant, or by writing to [SUPPORT EMAIL].
- Correct what is wrong. Your name and picture come from Google, so change them there and they follow.
Depending on where you live, you may also have the right to object to processing, to restrict it, or to complain to your data protection authority. Write to [SUPPORT EMAIL] and we will answer within 30 days.
11. Security
Traffic is encrypted in transit, and the database is reachable only from our own servers on a private network. Every query for forms and answers is filtered by account owner in the database itself, so one person's assistant cannot reach another person's data. Sign-in tokens are short-lived and scoped to the account that requested them.
No system is perfect. If we discover a breach that affects you, we will tell you and the relevant authority as quickly as the law requires.
12. Where your data lives
Formset runs on servers in [HOSTING REGION]. If you or your respondents are elsewhere, your information is transferred there and protected by the safeguards our providers offer, including standard contractual clauses where they apply.
13. Children
Formset is not for children under 16, and we do not knowingly create accounts for them. If you believe a child has an account with us, write to [SUPPORT EMAIL] and we will remove it. Whether your own forms may be filled in by children is your decision and your responsibility.
14. Changes to this policy
When we change something that matters, we update the date at the top and email account holders before it takes effect. Small corrections go in quietly.
15. Contact us
Questions, requests, or complaints: [SUPPORT EMAIL], or [COMPANY LEGAL NAME], [BUSINESS ADDRESS].