Privacy Policy
Privacy Policy Last Updated: April 28, 2025 Welcome to Buildform! We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our form‑building platform anywhere in the world. It also outlines the choices and rights available to you.1. Who We Are
Buildform (“we,” “us,” “our”) provides no‑code tools for creating, managing, and storing online forms at https://buildform.ai. We operate globally and strive for full transparency in how we handle data.2. User Categories and the Data We Handle
| User type | Role under data‑protection law | Data we collect/handle |
| Form Owners (account holders) | Controller | • First & last name • Email address • Profile picture (optional) • Billing metadata • Google Drive scope (if connected) • Usage & diagnostic data |
| Form Responders (people who fill out a form) | Processor on behalf of the Form Owner | • Form responses and any files the responder uploads |
3. Information We Collect From Form Owners
- Personal information: name, email, optional profile image.
- OAuth data (Google Drive): limited to the files and scopes you explicitly grant.
- Usage & diagnostic data: IP address, device type, OS, browser, referring URLs, pages viewed, and session duration.
- Payment data: processed by Stripe; we never store full card numbers.
- Third‑party service identifiers: Clerk (authentication), Brevo (transactional email).
4. How We Use Your Information
- Provide, maintain, and support your Buildform account.
- Facilitate form creation, response storage, and integrations (e.g., Google Drive).
- Monitor performance, troubleshoot errors, and improve features.
- Send service notices and (with your opt‑in) newsletters or promotions.
- Detect, prevent, and mitigate fraud or security incidents.
- Fulfil legal or contractual obligations.
5. Google User‑Data Disclosure
We access Google Drive only when you connect your account for Google Sheets Integration:- Read: import or reference existing files.
- Write: create or update files generated by Buildform.
- We never share Google data with third parties without your explicit direction.
- Access can be revoked at any time in your Google security settings.
6. Cookies & Similar Technologies
We use:- Essential cookies – required for login and core site functions.
- Analytics cookies (Google Analytics, Microsoft Clarity) – to understand aggregate usage patterns. You can block or delete cookies in your browser settings. A cookie‑consent banner is scheduled for release soon to give you fine‑grained control.
7. Data Storage, Infrastructure & Security
| Layer | Provider | Region(s) | Safeguards |
| Object & file storage | AWS S3 | US | Server‑side encryption (SSE‑S3) |
| Primary database | MongoDB Atlas | US/ EU/ Asia | Encryption‑at‑rest & in‑transit, VPC peering |
| Compute / serverless | AWS | US/ EU/ Asia | IAM least‑privilege roles, runtime isolation |
| CDN & WAF | Cloudflare | Global edge network | TLS 1.3, DDoS protection |
- All traffic is forced over HTTPS.
- Secrets are stored in AWS Secrets Manager and rotated regularly.
- Quarterly vulnerability scans and annual third‑party penetration tests.
- If a data breach occurs, we will notify affected users and regulators as required by law.
8. Your Rights & Choices
Depending on your jurisdiction, you can:- Access the personal data we hold about you.
- Request correction of inaccurate information.
- Delete your account (we retain backups for up to 90 days).
- Download your form data at any time.
- Object to or restrict certain processing.
- Opt out of marketing emails by clicking unsubscribe.
9. Data Retention
- Form Owners – account data retained while the account is active plus 90 days.
- Form Responders – retained only as long as the Form Owner keeps it or instructs deletion.
- Usage logs – 24 months, then aggregated or deleted.