Privacy Policy

Last updated: November 17, 2025

1. Introduction

FormsFlow ("we", "our" or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our AI-powered form creation service.

2. Information We Collect

2.1 Account Information

  • Name and email address (via Google OAuth)
  • Profile photo (if available)
  • Unique user ID
  • Usage and credit information

2.2 Usage Data

  • Forms created and their settings
  • Interactions with the AI assistant
  • Conversation history and prompts
  • Service usage statistics

2.3 Technical Information

  • IP address and approximate location
  • Browser and device type
  • Pages visited and usage time
  • Cookies and similar technologies

3. How We Use Your Information

  • Provide and improve our services
  • Process your form creation requests
  • Manage your account and credits
  • Send important service notifications
  • Analyze and improve user experience
  • Prevent fraud and ensure security
  • Comply with legal obligations

4. Google Services Integration

FormsFlow integrates with Google Forms and Google Drive to create and manage your forms. When you authorize our application:

  • We access your Google account only to create forms on your behalf
  • Created forms are stored in your own Google Drive account
  • We do not share your Google data with third parties without authorization
  • You can revoke access at any time

5. Information Sharing

We share your information only in the following situations:

  • AI Services: We send your prompts to AI providers (OpenAI, Anthropic, Google) to process your requests
  • Google APIs: To create forms in your Google account
  • Payment Processors: To process credit transactions
  • Legal Requirements: When required by law or to protect our rights

6. Data Security

We implement technical and organizational security measures to protect your information, including:

  • Data encryption in transit and at rest
  • OAuth 2.0 authentication with Google
  • Role-based access controls
  • Continuous security monitoring
  • Regular security audits

7. Data Retention

We retain your information for as long as necessary for:

  • Account data: Until you delete your account
  • Conversation history: 90 days after creation
  • Financial transactions: 5 years (legal requirement)
  • System logs: 30 days

8. Your Rights

In accordance with LGPD (General Data Protection Law) and GDPR, you have the right to:

  • Access your personal information
  • Correct incorrect or incomplete data
  • Request deletion of your data
  • Export your data in a readable format
  • Revoke previously given consents
  • Object to the processing of your data
  • Request data portability

9. Cookies and Similar Technologies

We use cookies and similar technologies to improve your experience, including:

  • Essential cookies: Required for the service to function
  • Analytics cookies: To understand how you use our service
  • Preference cookies: To remember your settings

10. Children's Privacy

Our service is not intended for minors under 18 years of age. We do not intentionally collect information from minors. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or through a notice on our service. Continued use after changes constitutes acceptance of the new policy.

12. International Data Transfers

Your data may be transferred to and maintained on servers located outside your country, where data protection laws may be different. We take measures to ensure your data receives adequate protection as required by LGPD and GDPR.

13. Contact

To exercise your rights or clarify questions about this Privacy Policy, contact us:

contato@formsflow.dev
https://www.formsflow.dev
Brazil

14. Data Protection Officer (DPO)

For specific questions about data protection, you can contact our Data Protection Officer (DPO) via email: dpo@formsflow.dev

This Privacy Policy complies with LGPD (Law No. 13,709/2018) and GDPR (EU General Data Protection Regulation).