Privacy Policy

What we collect

1. Data you put into FormFlux

This includes:

• Form titles, questions, settings, and anything else you add while building a form
• Files you upload (if you are on a plan that supports file uploads)

2. Responses people submit

When someone fills out a FormFlux form, we collect what they submit. That could include:

• Names, emails, phone numbers
• Messages, survey answers, feedback
• Any other fields you add

You control what you ask for. We just store what gets submitted.

3. Basic technical data

When someone uses FormFlux (builder or public forms), we may collect:

• IP address
• Browser and device type
• Approximate location (based on IP)
• Referrer and UTM parameters (if present)
• Timestamps (when things were viewed or submitted)

This is mostly for security, analytics, and debugging.

What we do with the data

We use data to:

• Run the product (obviously)
• Store form responses and show them to the form owner
• Prevent spam and abuse
• Provide analytics if you are on a plan that includes analytics
• Improve performance and reliability

We do not use your form responses to advertise to people.

We do not sell your data.

AI features

If you use AI form generation, you are basically sending a prompt that says what form you want. We use that prompt and context to generate a draft form.

What we may process for AI:

• The prompt you type
• The back and forth conversation (if you refine it)
• If you paste a URL, we may fetch basic page content to help draft the form and match branding

What we do not do:

• We do not train a public model on your private form responses
• We do not look at your responses to "learn your business"

If you do not use AI features, none of this applies.

Who can see the data

Form owners

The person or team that created the form can see the responses.

You

If you are filling out a form, your responses go to the form owner. FormFlux is the tool, not the recipient.

Us

We do not access your form content or responses unless:

• You ask for support and give permission
• We need to investigate abuse, fraud, spam, or security issues
• We are required by law

Sharing and embeds

If you embed a form on your site, visitors are still submitting responses to FormFlux, and those responses go to the form owner.

If you share a public link, anyone with the link may access the form unless you enable protections like passwords or limits.

Integrations

If you connect FormFlux to another service (Google Sheets, Zapier, Slack, webhooks, etc.), we will send data to that service as instructed.

That service will have its own privacy policy.

We cannot control what they do with the data once it leaves FormFlux.

Cookies

We use cookies for:

• Login sessions
• Keeping the app working properly
• Remembering basic settings

We do not use cookies to follow you around the internet.

If we use analytics cookies, we keep it limited and product focused.

Data retention

We keep your forms and responses for as long as your account is active, unless you delete them.

If you delete something, we remove it from active systems. Some data may remain in backups for a limited time, then it disappears as backups roll over.

Security

We take security seriously, but we will not pretend anything is invincible.

We use reasonable measures like:

• Encryption in transit (HTTPS)
• Access controls
• Monitoring for abuse and suspicious activity

You are also responsible for:

• Keeping your login secure
• Not collecting sensitive data you do not actually need

Sensitive data

Do not use FormFlux to collect:

• Credit card numbers (unless you have a proper payment provider)
• Government ID numbers (unless you really, truly need to)
• Medical information, unless you know what you are doing and have the right compliance setup

If you collect sensitive data anyway, that is on you.

Your rights

Depending on where you live, you may have rights like:

• Access to your data
• Correction
• Deletion
• Export

If you are a FormFlux account holder, contact us at support@formflux.io.

If you filled out someone else's form, you should contact the form owner first, because they control the data.

Children

FormFlux is not meant for children.

If you believe a child has submitted personal information through a FormFlux form, contact us and we will handle it.

International users

FormFlux may process data in countries other than your own. By using the service, you understand that data may be transferred and stored where our infrastructure or service providers operate.

Legal requests

If we receive a valid legal request for data, we may be required to comply.

If we are allowed to, we will notify the account owner before sharing anything.

Changes to this policy

If we change this policy, we will update the date at the top.

If changes are significant, we will post a notice on the site or in the app.