Privacy Policy

This Privacy Policy explains how Formz LLC ("Formz," "we," "us," or "our") collects, uses, and discloses information when you use our form-building platform (the "Service").

1. Information We Collect

We collect the following categories of information:

• Account information: name, email address, password (hashed), and optional profile details (bio, avatar, company name, brand colors) you provide.
• Form & response data: the forms you build, and the responses respondents submit to those forms, including any personal data a form is configured to collect.
• Wallet & identity verification data: if you or your respondents use wallet-connect or social-OAuth blocks, we process the public wallet address, signed message, and verification result (and, where configured, on-chain balances or token/NFT holdings) or the OAuth profile fields a provider returns (e.g. name, username, follower count). We never receive or store private keys, seed phrases, or OAuth account passwords.
• Billing information: handled directly by our payment processor, Stripe — we do not store full payment card numbers ourselves.
• Usage & device information: log data, IP address, browser/device type, and form analytics events (views, starts, completions) for forms you own.
• Cookies: see our Cookie Policy for the specific cookies we use.

2. How We Use Information

• To provide, operate, and maintain the Service (e.g. authenticating you, storing your forms and responses, running wallet/identity verification you configure).
• To process payments and manage subscriptions.
• To send transactional emails (e.g. form submission notifications, password resets, workspace invitations) and, where you've opted in, product updates.
• To monitor, secure, and improve the Service, including detecting abuse and debugging errors.
• To comply with legal obligations.

3. Subprocessors & Third-Party Services

We share information with the following service providers, solely to the extent necessary for them to perform services on our behalf:

• Supabase — database, authentication, and file storage.
• Vercel — application hosting.
• Stripe — payment processing and subscription billing.
• Resend — transactional email delivery.
• Sentry — error monitoring (technical error reports only; we do not deliberately send form response content to Sentry).
• Alchemy & TonAPI — blockchain RPC/data providers used to read public on-chain data (balances, token/NFT ownership) for wallet-gated forms.
• OAuth identity providers — Twitter/X, Discord, Google, Telegram, and LinkedIn, used only when a form you build includes a social-verification block and a respondent chooses to connect that account.

Each of these providers processes data under its own privacy policy and only for the purpose of providing their service to Formz. We do not sell your personal information.

4. Data Retention

We retain account and form data for as long as your account is active. If you delete a form or your account, we delete the associated data within a reasonable period, except where we are required to retain it for legal, billing, or fraud-prevention purposes.

5. Your Rights

Depending on your location, you may have the right to access, correct, export, or delete your personal information. You can export your account data or delete your account at any time from your account settings. For any other privacy request, contact us at support@joinformz.com.

6. International Data Transfers

Our service providers may process data in the United States and other countries. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for transfers of personal data outside the European Economic Area or United Kingdom.

7. Children's Privacy

The Service is not directed to children under 18, and we do not knowingly collect personal information from children under 18.

8. Security

We use industry-standard technical and organizational measures to protect your information, including encryption in transit, access controls, and per-request signature verification for wallet and OAuth identity claims. No system is perfectly secure, and we cannot guarantee absolute security.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date above and, for material changes, provide reasonable notice.

10. Contact

Questions about this Privacy Policy can be sent to support@joinformz.com.