Privacy Policy

What this document covers

This Privacy Policy explains how FormsDock (“we”, “us”, or “our”) collects, uses, stores, and shares information when you use our contact form backend service. It applies to the formdock.app website, the formdock.x7656297.workers.dev deployment, and the FormsDock dashboard.

Information we collect

We collect three categories of information.

• Account data. When you sign up, we collect your email address and a hashed password (or a WebAuthn credential, if you choose passkey login). We never store passwords in plaintext.
• Form submissions. Every submission sent through your FormsDock endpoint is stored encrypted at rest. We also compute a SHA-256 hash of the payload for dedup and abuse detection.
• Usage telemetry. We collect anonymized request counts, response latencies, and feature usage events. We use PostHog for product analytics; you can opt out from the dashboard.

How we use information

We use the information we collect to deliver the service, detect abuse, send transactional emails (receipts, security alerts), and improve the product. We do not sell personal data. We do not share form submissions with advertisers.

Legal basis for processing (GDPR)

For users in the European Economic Area, we process personal data under the following legal bases:

• Contract. Processing is necessary to perform the service you signed up for.
• Legitimate interest. We process usage telemetry to detect abuse and improve the product.
• Consent. Marketing emails and non-essential cookies are sent only with your consent.

Your rights

You can access, export, correct, or delete your data at any time from the dashboard. EU residents can exercise additional rights under GDPR, including data portability and the right to lodge a complaint with a supervisory authority. Contact us at privacy@formdock.app to exercise any right not covered by the self-service dashboard.

Data retention

Form submissions are retained for as long as your account is active. You can set a custom retention period per form, down to zero days. Account deletion removes all data within 30 days, with backups purged within 90 days.

Subprocessors

We use a small set of subprocessors to deliver the service. The current list is published at /legal/subprocessors.

Changes to this policy

We will notify account holders by email at least 14 days before any material change takes effect. The current version always lives at this URL.

Contact

Reach the privacy team at privacy@formdock.app. We respond within five business days.