Privacy Policy

Last Updated: April 29, 2025

Welcome to FigForm! We are committed to protecting your privacy and ensuring your data is handled responsibly and transparently.

This Privacy Policy explains how FigForm, Inc. ("FigForm", "we", "our", or "us") collects, uses, stores, shares, and protects your personal information when you use our services. FigForm is incorporated in the state of Delaware, USA.

1. Who We Are

FigForm is a platform that allows users to build and distribute custom forms. We act as a data processor on behalf of users who create and send forms ("Form Creators"). The responsibility for the data collected via those forms lies with the Form Creators, who are considered data controllers under applicable law.

2. Data We Collect

We collect the following types of information:

a. Account Information

b. Support & Contact

c. Billing

d. Form Responses

3. No Cookie Tracking

We do not use browser cookies or any similar technologies to track user behavior across our site. You will not be profiled, retargeted, or analyzed via cookies.

4. How We Use Your Information

We use your personal data for the following purposes:

5. Third-Party Services

We use the following third-party services to deliver our platform securely and reliably:

Service

Purpose

Notes

Amazon Web Services (AWS)

Hosting and data storage

All servers are hosted on secure AWS infrastructure

AWS SES

Transactional email delivery

Sends account and system emails

Cloudflare

Security and DDoS protection

No personal data is stored

Google Cloud (OAuth)

Account sign-in (Sign in with Google)

Only email and profile name retrieved

Sentry

Error monitoring

Tracks system issues, not user behavior

Stripe

Payment processing

Handles billing data, PCI-compliancy

These services are contractually bound to adhere to data protection obligations under applicable laws (e.g., GDPR Article 28).

6. Your Rights Under GDPR

If you're located in the European Economic Area (EEA), you have the following rights:

To exercise your rights, contact us at: https://figform.io/contact

7. Children's Privacy (COPPA)

FigForm is not intended for use by children under the age of 13. We do not knowingly collect or solicit personal data from children. If we discover that we have inadvertently collected data from a child, we will delete it promptly.

8. Data Retention

We retain personal data only as long as your account remains active. Upon deletion of your account, all data will be permanently erased unless we are legally required to retain it (e.g., for tax or audit purposes).

9. Data Transfers

Your data may be transferred to and processed in the United States or other jurisdictions that may not have the same level of data protection as your home country. By using FigForm, you consent to such transfers in accordance with this Privacy Policy.

10. Security Practices

We implement appropriate organizational and technical measures including:

11. Policy Updates

We may revise this Privacy Policy periodically. If material changes are made, you may be asked to review and accept the changes before continuing to use FigForm.

12. Contact Us

For questions about this Privacy Policy or your personal data, contact us via:

https://figform.io/contact