Privacy Policy
Effective Date: February 3, 2026 Version 1.01. Introduction
FormHug (“FormHug”, “we”, “us”, or “our”) is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our online form-building platform (the “Service”), accessible via https://formhug.ai. This Privacy Policy applies to:- Visitors to our website.
- Users who register for an Account and use the Service (“Form Creators”).
- Individuals who fill out and submit Forms created using the Service (“Submitters”).
2. Data Controller Information
2.1 FormHug as Data Controller
FormHug is the data controller for the personal data we collect from our Users (Form Creators) for the purpose of providing and managing the Service. Contact Information:- Email: support@formhug.ai
2.2 Form Creators as Data Controllers
When a Form Creator uses the Service to collect personal data from Submitters, the Form Creator is the data controller for that data. FormHug acts as the data processor on behalf of the Form Creator. Form Creators are responsible for ensuring they have a lawful basis for collecting and processing personal data and for complying with all applicable data protection laws.3. Information We Collect
We collect different types of information depending on how you interact with the Service.3.1 Information Collected from Form Creators
| Data Category | Details | Purpose |
|---|---|---|
| Account Information | Name, email address, password (hashed), company name, job title. | To create and manage your Account, provide customer support, and communicate with you. |
| Payment Information | Credit card details, billing address, VAT number. | To process payments for paid subscriptions. Payment information is processed by our third-party payment processors (e.g., Stripe). |
| Usage Data | IP address, browser type, device information, operating system, pages visited, features used, time and date of access. | To analyze usage patterns, improve the Service, and ensure security. |
| Communication Data | Emails, support requests, feedback, and other communications with us. | To respond to your inquiries and improve our Service. |
3.2 Information Collected from Submitters
When a Submitter fills out a Form, the Form Creator determines what data is collected. This may include names, email addresses, phone numbers, and any other information the Form Creator requests. FormHug processes this data on behalf of the Form Creator as a data processor.3.3 Information Collected Automatically
We automatically collect certain information when you visit our website or use the Service, including:- Log Data: IP address, browser type, referring/exit pages, operating system, date/time stamps, and clickstream data.
- Device Information: Device type, unique device identifiers, and mobile network information.
- Cookies and Similar Technologies: We use cookies, web beacons, and similar technologies to collect information about your browsing activities. See Section 10 for more details.
4. Legal Bases for Processing (GDPR)
For users in the European Economic Area (EEA), United Kingdom, and Switzerland, we process personal data based on the following legal grounds:| Legal Basis | Description | Examples |
|---|---|---|
| Performance of a Contract | Processing is necessary to fulfill our contractual obligations to you. | Providing the Service, processing payments, managing your Account. |
| Legitimate Interests | Processing is necessary for our legitimate business interests, provided these are not overridden by your rights. | Improving the Service, marketing our products, ensuring security, preventing fraud. |
| Consent | You have given explicit consent to the processing of your personal data for specific purposes. | Sending marketing communications, using certain cookies. |
| Legal Obligation | Processing is necessary to comply with a legal obligation. | Responding to lawful requests from public authorities, tax and accounting requirements. |
5. How We Use Your Information
We use the information we collect for the following purposes:- To Provide and Maintain the Service: Creating and managing your Account, enabling you to create and publish Forms, processing Submissions, and providing customer support.
- To Process Payments: Charging Fees for paid subscriptions and managing billing.
- To Improve the Service: Analyzing usage data to understand how users interact with the Service and to develop new features and functionality.
- To Communicate with You: Sending transactional emails (e.g., account verification, password reset), responding to inquiries, and providing updates about the Service.
- For Marketing Purposes: With your consent, sending promotional emails about new products, features, or offers. You can opt out of marketing communications at any time.
- To Ensure Security: Detecting, preventing, and addressing technical issues, fraud, and security breaches.
- To Comply with Legal Obligations: Responding to legal requests and complying with applicable laws and regulations.
6. How We Share Your Information
We do not sell your personal data. We may share your information with the following categories of third parties:6.1 Service Providers (Subprocessors)
We engage third-party companies and individuals to perform services on our behalf, such as hosting, payment processing, email delivery, analytics, and customer support. These service providers have access to your personal data only to perform these tasks and are obligated to protect your data.6.2 Business Transfers
In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal data may be transferred to the acquiring entity. We will notify you of any such change and any choices you may have regarding your personal data.6.3 Legal Requirements
We may disclose your personal data if required to do so by law or in response to valid requests by public authorities (e.g., a court order, subpoena, or government agency request). We may also disclose your information to protect the rights, property, or safety of FormHug, our users, or others.6.4 With Your Consent
We may share your personal data with third parties when you have given us your explicit consent to do so.7. International Data Transfers
Your personal data may be transferred to, and processed in, countries other than the country in which you reside. These countries may have data protection laws that are different from the laws of your country. For users in the EEA, UK, and Switzerland, when we transfer your personal data to countries outside the EEA that have not been deemed to provide an adequate level of data protection, we implement appropriate safeguards, such as:- Standard Contractual Clauses (SCCs): We use SCCs approved by the European Commission to ensure that your personal data receives an adequate level of protection.
- Data Processing Agreements: We enter into data processing agreements with our subprocessors that include appropriate data protection provisions.
8. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements.| Data Category | Retention Period |
|---|---|
| Account Information | Retained for as long as your Account is active. After Account deletion, data is retained for a reasonable period (e.g., 90 days) to allow for re-activation, then permanently deleted. |
| Payment Information | Retained for as long as required by applicable tax and accounting laws (typically 7 years). |
| Form Submissions | Retained until deleted by the Form Creator. Deleted data is permanently removed from our backups within 90 days. |
| Usage Data | Retained for up to 2 years for analytics and service improvement purposes. |
9. Your Data Protection Rights
Depending on your location, you may have the following rights regarding your personal data:9.1 Rights Under GDPR (EEA, UK, Switzerland)
- Right of Access: You have the right to request a copy of the personal data we hold about you.
- Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data.
- Right to Erasure (“Right to be Forgotten”): You have the right to request that we delete your personal data, subject to certain exceptions.
- Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data under certain circumstances.
- Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.
- Right to Object: You have the right to object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
- Right to Withdraw Consent: If we are processing your personal data based on your consent, you have the right to withdraw that consent at any time.
- Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority if you believe that our processing of your personal data violates applicable law.
9.2 Rights Under US State Privacy Laws (e.g., CCPA, CPRA)
If you are a resident of California or another US state with applicable privacy laws, you may have additional rights, including:- The right to know what personal information is collected, used, shared, or sold.
- The right to delete personal information.
- The right to opt out of the sale or sharing of personal information.
- The right to non-discrimination for exercising your privacy rights.
9.3 Exercising Your Rights
To exercise any of your data protection rights, please contact us at support@formhug.ai. We will respond to your request within the timeframe required by applicable law. We may need to verify your identity before processing your request.10. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to collect information about your browsing activities and to distinguish you from other users.10.1 Types of Cookies We Use
| Cookie Type | Purpose |
|---|---|
| Essential Cookies | Necessary for the operation of the Service. They enable core functionality such as security, network management, and accessibility. |
| Analytics Cookies | Help us understand how visitors interact with our website by collecting and reporting information anonymously. |
| Functional Cookies | Enable enhanced functionality and personalization, such as remembering your preferences. |
| Marketing Cookies | Used to track visitors across websites to display relevant advertisements. |
10.2 Managing Cookies
You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Service.11. Children’s Privacy
The Service is not intended for children under the age of 16 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal data from children. If you are a parent or guardian and believe that your child has provided us with personal data, please contact us, and we will take steps to delete such information.12. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:- Encryption: All data is encrypted in transit using TLS and at rest using AES-256 encryption.
- Access Controls: Access to personal data is restricted to authorized personnel on a need-to-know basis.
- Regular Audits: We conduct regular security audits and vulnerability assessments.
- Incident Response: We have procedures in place to detect, investigate, and respond to data breaches.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the updated Privacy Policy on the Service and updating the “Effective Date” at the top. We encourage you to review this Privacy Policy periodically.14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: FormHug- Email: support@formhug.ai