Privacy Policy

Last Updated: September 8, 2025

Welcome to FigForm! We are committed to protecting your privacy and ensuring your data is handled responsibly and transparently.

This Privacy Policy explains how FigForm ("we", "our", or "us") collects, uses, stores, shares, and protects your personal information when you use our services. FigForm is operated by Aaron Delasy, an individual based in Ukraine.

1. Who We Are

FigForm is a platform that allows users to build and distribute custom forms. We act as a data processor on behalf of users who create and send forms ("Form Creators"). The responsibility for the data collected via those forms lies with the Form Creators, who are considered data controllers under applicable law.

2. Data We Collect

We collect the following types of information:

a. Account Information

Your name and email address when you create an account
Authentication tokens (e.g., via Google Sign-In)

b. Support & Contact

Information you voluntarily provide when you contact us for support or inquiries

c. Billing

Information required to process payments via Paddle (e.g., billing address, cardholder name). All payment data is processed directly by Paddle in accordance with their Privacy Policy.

d. Form Responses

Form responses are controlled by the Form Creator and are not accessed or processed by FigForm unless explicitly requested for technical support or as required by law

3. No Cookie Tracking

We do not use browser cookies or similar technologies to track user behavior across our site. You will not be profiled, retargeted, or analyzed via cookies.

4. How We Use Your Information

We use your personal data for the following purposes:

To provide and operate the FigForm platform
To communicate with you (e.g., onboarding emails, account-related alerts)
To send essential service updates or legal notices
To process payments and manage subscriptions
To maintain platform integrity and investigate abuse or fraud
To respond to legal requests or law enforcement

5. Third-Party Services

We use the following third-party services to deliver our platform securely and reliably:

Service	Purpose	Notes
Amazon Web Services (AWS)	Hosting and data storage	All servers are hosted on secure AWS infrastructure
AWS SES	Transactional email delivery	Sends account and system emails
Cloudflare	Security and DDoS protection	No personal data is stored
Google Cloud (OAuth)	Account sign-in (Sign in with Google)	Only email and profile name retrieved
Sentry	Error monitoring	Tracks system issues, not user behavior
Paddle	Payment processing	Handles all billing data, PCI-compliant

These services are contractually bound to adhere to data protection obligations under applicable laws (e.g., GDPR Article 28).

6. Your Rights Under GDPR

If you're located in the European Economic Area (EEA), you have the following rights:

Right to Access - Request access to your personal data
Right to Rectification - Correct inaccurate or incomplete data
Right to Erasure ("Right to be Forgotten") - Delete your personal data
Right to Restrict Processing - Limit how we use your data
Right to Data Portability - Receive a copy of your data in a structured format
Right to Object - Object to certain processing activities
Right to Lodge a Complaint - With your local supervisory authority

To exercise your rights, contact us at: https://figform.io/contact

7. Children's Privacy (COPPA)

FigForm is not intended for use by children under the age of 13. We do not knowingly collect or solicit personal data from children. If we discover that we have inadvertently collected data from a child, we will delete it promptly.

8. Data Retention

We retain personal data only as long as your account remains active. Upon deletion of your account, all data will be permanently erased unless we are legally required to retain it (e.g., for tax or audit purposes).

9. Data Transfers

Your data may be transferred to and processed in jurisdictions outside your home country, including the United States, which may not have the same level of data protection. By using FigForm, you consent to such transfers in accordance with this Privacy Policy.

10. Security Practices

We implement appropriate organizational and technical measures including:

Encrypted data transmission (TLS 1.2+)
Secure password hashing (bcrypt)
Role-based access control
Continuous system monitoring and error reporting

11. Policy Updates

We may revise this Privacy Policy periodically. If material changes are made, you may be asked to review and accept the changes before continuing to use FigForm.

12. Contact Us

For questions about this Privacy Policy or your personal data, contact us via:

https://figform.io/contact