Privacy Policy
Last updated: September 9, 2026
1. Introduction
FormsFlow ("we", "our" or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our AI-powered form creation service.
2. Information We Collect
2.1 Account Information
- Name and email address (via Google OAuth)
- Profile photo (if available)
- Unique user ID
- Usage and credit information
2.2 Usage Data
- Forms created and their settings
- Interactions with the AI assistant
- Conversation history and prompts
- Service usage statistics
2.3 Technical Information
- IP address and approximate location
- Browser and device type
- Pages visited and usage time
- Cookies and similar technologies
3. How We Use Your Information
- Provide and improve our services
- Process your form creation requests
- Manage your account and credits
- Send important service notifications
- Analyze and improve user experience
- Prevent fraud and ensure security
- Comply with legal obligations
- Publish aggregated, anonymised statistics about how the service is used, from which no person, account or institution can be identified
4. Google Services Integration
FormsFlow integrates with Google Forms and Google Drive to create and manage your forms. When you authorize our application:
- We access your Google account only to create forms on your behalf
- Created forms are stored in your own Google Drive account
- We do not share your Google data with third parties without authorization
- You can revoke access at any time
5. Information Sharing
We share your information only in the following situations:
- AI Services: We send your prompts to AI providers (OpenAI, Anthropic, Google) to process your requests
- Google APIs: To create forms in your Google account
- Payment Processors: To process credit transactions
- Legal Requirements: When required by law or to protect our rights
6. Data Security
We implement technical and organizational security measures to protect your information, including:
- Data encryption in transit and at rest
- OAuth 2.0 authentication with Google
- Role-based access controls
- Continuous security monitoring
- Regular security audits
7. Data Retention
We retain your information for as long as necessary for:
- Account data: Until you delete your account
- Conversation history: 90 days after creation
- Financial transactions: 5 years (legal requirement)
- System logs: 30 days
8. Your Rights
In accordance with LGPD (General Data Protection Law) and GDPR, you have the right to:
- Access your personal information
- Correct incorrect or incomplete data
- Request deletion of your data
- Export your data in a readable format
- Revoke previously given consents
- Object to the processing of your data
- Request data portability
9. Cookies and Similar Technologies
We use cookies and similar technologies to improve your experience, including:
- Essential cookies: Required for the service to function
- Analytics cookies: To understand how you use our service
- Preference cookies: To remember your settings
10. Children's Privacy
Our service is not intended for minors under 18 years of age. We do not intentionally collect information from minors. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.
11. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of significant changes via email or through a notice on our service. Continued use after changes constitutes acceptance of the new policy.
12. International Data Transfers
Your data may be transferred to and maintained on servers located outside your country, where data protection laws may be different. We take measures to ensure your data receives adequate protection as required by LGPD and GDPR.
13. Contact
To exercise your rights or clarify questions about this Privacy Policy, contact us:
14. Data Protection Officer (DPO)
For specific questions about data protection, you can contact our Data Protection Officer (DPO) via email: dpo@formsflow.dev
This Privacy Policy complies with LGPD (Law No. 13,709/2018) and GDPR (EU General Data Protection Regulation).