Privacy Policy

1. Introduction

FormX ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our form backend service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Your Clerk user ID, email address, name, and profile image
• Subscription status and Stripe customer or subscription identifiers
• Payment details processed by Stripe; Contact FormX does not store card numbers

Authentication credentials are handled by Clerk. Contact FormX does not receive or store your password.

2.2 Form Submission Data

We collect and store form submissions sent through your forms, which may include:

• Form field data submitted by your users
• Submission timestamps
• The form endpoint that received the submission

We process network addresses to prevent abuse, but our rate-limit database stores only a short-lived SHA-256 hash and does not attach a raw IP address to a submission.

2.3 Usage Information

We automatically collect certain information about your use of the Service:

• Pages visited and product actions measured through our analytics providers
• Browser or device information made available by those providers
• Versioned onboarding milestones stored in your browser

3. How We Use Your Information

We use the collected information to:

• Provide and maintain the Service
• Process form submissions and send notifications
• Manage your account and subscriptions
• Improve and optimize the Service
• Communicate with you about updates and support
• Detect and prevent fraud or abuse
• Comply with legal obligations

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information with:

• Service Providers: Providers that help us operate the Service, including Clerk, Stripe, Resend, Cloudflare, and Vercel
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

5. Data Security

We implement appropriate technical and organizational measures to protect your data:

• HTTPS/TLS for data in transit
• Authenticated and owner-scoped dashboard APIs
• Server-side storage of API and payment secrets
• Minimized, hashed identifiers for submission rate limits

6. Data Retention

We retain your information for as long as necessary to:

• Provide the Service to you
• Comply with legal obligations
• Resolve disputes
• Enforce our agreements

You can delete your account and data at any time from your account settings.

Delivered notification jobs are removed immediately. Notification jobs that cannot be delivered after all retry attempts are removed after seven days. Billing records may be retained by Stripe when required for financial, tax, fraud-prevention, or legal obligations.

7. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Update or correct your information
• Deletion: Request deletion of your data
• Portability: Receive your data in a portable format
• Objection: Object to certain processing activities
• Withdrawal: Withdraw consent at any time

8. Cookies and Tracking

We use cookies and similar tracking technologies to:

• Maintain your session
• Remember your preferences
• Analyze usage patterns
• Improve the Service

You can control cookies through your browser settings.

9. Third-Party Services

Our Service may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of these third parties.

10. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by email or through the Service.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: privacy@formx.dev

For data protection inquiries: dpo@formx.dev