Privacy policy
This explains what formset collects, why, and what you can do about it. It is written to be read, not to be survived.
1. Who we are
formset is a form builder you operate through a conversation with an AI assistant. You describe a form, we host it, respondents fill it in a browser, and you ask us for the answers. The service runs at getformset.com.
formset is operated by Bolinas Labs LLC, 30 N Gould St Ste N, Sheridan, WY 82801. For anything in this policy, write to hello@getformset.com.
2. What Google tells us when you sign in
Google is the only way to sign in to formset. There is no password. Sign-in happens when your assistant first connects to formset, and again if you sign in on our website to manage your plan. We ask Google for exactly three permissions, all of which Google classes as non-sensitive:
That is the whole list. We do not request access to Gmail, Drive, Calendar, Contacts, Photos, or any other Google service, so we cannot read them even if we wanted to.
3. Google API Services Limited Use
formset's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In practice: we use what Google gives us to sign you in and to identify your account. We do not transfer it to anyone else, we do not use it for advertising, and no human at formset reads it except when you ask us for support or the law requires it.
4. What we store
Your account. Your Google account identifier, email address, name, and profile picture URL, plus the sign-in sessions and access tokens that keep you connected.
Your forms. The title, description, settings, and fields of every form you create, and each earlier version of it, so a form that has already been filled in keeps its shape. We sometimes read the titles, descriptions and questions of forms, never the answers, to learn what people use formset for and how to describe it. Anything we write down from that is counts and kinds of form, never anything that identifies you.
The answers people send you. Whatever your respondents type into your form, plus a small amount of technical information about each submission: an irreversible hash of the sender's IP address, the browser user agent, the referring page, and how long the form took to complete. We keep those to catch spam and abuse, not to build a profile of anyone. We do not store raw IP addresses against submissions.
Abuse reports. If someone reports one of your forms, we store the report, the reason given, and a hash of the reporter's IP address.
Refused forms. If formset refuses to create or change a form because it looks like it asks for passwords, card details or similar, we keep that form's title, description and questions for 30 days so we can check the refusal was right. Then they are deleted.
Operational logs. Which tool ran, for which account and form, how long it took, and whether it succeeded. Logs never contain the contents of a form or an answer.
5. What we never do
- We do not send your forms or answers to a language model. formset makes no model calls of its own. The conversation happens in your assistant, on your side; we store data and return it when your assistant asks on your behalf.
- We do not sell or rent personal information to anyone, for any purpose.
- We do not run advertising, third-party scripts or analytics cookies on the forms your respondents see. A hosted form loads nothing from an ad network or an analytics service. Our own servers note that a form was viewed or answered, counted against the person who made it, with nothing about who the visitor was.
- We do not use your answers to train anything.
6. Answers people send you
When someone fills in a form you made, you decide what to ask and what to do with the replies. Under data protection law that usually makes you the controller of those answers and formset the processor acting for you.
So it is on you to tell your respondents who you are and why you are asking, and to have a lawful reason for collecting what you collect. It is on us to keep the answers safe, to hand them only to you, and to delete them when you say so.
If a respondent contacts us directly about their answers, we point them to the person who made the form, unless we are legally required to act ourselves.
7. Who else sees it
We use a small number of companies to run the service. They only get what they need to do their part:
We also disclose information when the law requires it, and we would tell you first unless we are forbidden to. If formset is ever sold or merged, your data moves with the service and this policy travels with it until we tell you otherwise.
8. How long we keep it
- Answers on the free plan are deleted 12 months after they arrive. On a paid plan they stay until you delete them.
- A form you delete is hidden immediately and permanently erased 30 days later, along with its answers. Within that window you can ask us to bring it back.
- Your account is erased when you ask us to close it, and your forms and answers go with it.
- Refused forms are deleted 30 days after the refusal.
- Operational logs are kept for a short period for security and debugging, then rotated out.
9. Your choices
- Cut off our Google access at any time at myaccount.google.com/permissions. Your assistant will not be able to reach formset afterwards, and your data stays until you ask us to delete it.
- Get a copy of any form's answers as CSV, or JSON on a paid plan, by asking for an export in your assistant.
- Delete a form and its answers by asking in your assistant, or by writing to hello@getformset.com. To close your whole account, write to hello@getformset.com.
- Correct what is wrong. Your name and picture come from Google, so change them there and they follow.
Depending on where you live, you may also have the right to object to processing, to restrict it, or to complain to your data protection authority. Write to hello@getformset.com and we will answer within 30 days.
11. Security
Traffic is encrypted in transit, and the database is reachable only from our own servers on a private network. Every query for forms and answers is filtered by account owner in the database itself, so one person's assistant cannot reach another person's data. Sign-in tokens are short-lived and scoped to the account that requested them.
No system is perfect. If we discover a breach that affects you, we will tell you and the relevant authority as quickly as the law requires.
12. Where your data lives
formset runs on servers in the United States (Railway, us-west2). If you or your respondents are elsewhere, your information is transferred there and protected by the safeguards our providers offer, including standard contractual clauses where they apply.
13. Children
formset is not for children under 16, and we do not knowingly create accounts for them. If you believe a child has an account with us, write to hello@getformset.com and we will remove it. Whether your own forms may be filled in by children is your decision and your responsibility.
14. Changes to this policy
When we change something that matters, we update the date at the top and email account holders before it takes effect. Small corrections go in quietly.
15. Contact us
Questions, requests, or complaints: hello@getformset.com, or Bolinas Labs LLC, 30 N Gould St Ste N, Sheridan, WY 82801.