Privacy Policy

1. Who we are

Formra (“we”, “us”, “our”) operates the website formra.net and the Formra form-building service. For questions about this policy, contact us at hello@formra.net.

2. What data we collect

Account data

When you sign up we collect your name, email address, and a hashed password (or a Google account identifier if you sign in with Google).

Usage data

We store the forms you create, the questions within them, and the responses submitted by your respondents. We also record the number of AI generations you have used.

Billing data

Payments are processed by Paddle, our Merchant of Record. We do not store your full card details. We receive a Paddle customer ID and subscription status from Paddle.

Technical data

We may collect standard server logs including IP addresses, browser type, and pages visited, for security and performance purposes.

3. How we use your data

• To create and manage your account
• To provide, maintain, and improve the Service
• To process payments and manage subscriptions
• To enforce our Terms of Service
• To send you transactional emails (e.g. email confirmation, password reset)
• To respond to your support requests

We do not sell your personal data to third parties. We do not use your form response data for advertising.

4. AI processing

When you use the AI question generator, the goal text you enter is sent to Anthropic's Claude API to generate questions. Anthropic processes this data in accordance with their own privacy policy. We do not send respondent answer data to Anthropic.

5. Third-party services

• Supabase — database and authentication hosting (EU region)
• Anthropic — AI question generation
• Paddle — payment processing and subscription management
• Vercel — application hosting

6. Data retention

We retain your account data for as long as your account exists. If you delete your account, we delete your personal data within 30 days. Response data collected through your forms is deleted when you delete the associated form or your account.

7. Your rights

Under UK GDPR and applicable data protection law, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Request deletion of your personal data
• Object to or restrict processing of your data
• Data portability — receive your data in a machine-readable format

To exercise any of these rights, email hello@formra.net. We will respond within 30 days.

8. Cookies

We use strictly necessary cookies for authentication (session tokens). We do not use tracking or advertising cookies.

9. Security

We use industry-standard measures including HTTPS, encrypted storage, and row-level security in our database. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Children

The Service is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email. The date at the top of this page indicates when it was last updated.

12. Contact

For privacy-related questions or requests, contact hello@formra.net.