Privacy Policy

Who this covers

FormNest (“we”, “us”) provides a form-building product. This policy covers people who use FormNest to build forms (our customers) and, separately, the people who submit responses to those forms.

For the responses collected through a customer's form, that customer decides what is asked and why — they are the controller of that data, and we process it on their behalf. Our data-processing terms cover that relationship; see the Data Processing Addendum.

Information we collect

Account information

Your name, email address, and the details needed to create and run your account and your plan.

Content you create

The forms you build — their questions, fields, logic, and settings.

Form responses

The submissions your forms collect, including any files uploaded to them. What's in a response is set by the form its author built.

Usage and technical data

Basic technical information such as log data and device or browser details, used to keep the service running and secure.

How we use it

• —To provide and maintain the product — building forms, collecting submissions, and showing you reports.
• —To secure the service and prevent abuse.
• —To communicate with you about your account, and about changes to the product when they matter.
• —To meet our legal obligations.

We do not sell your personal data, and we do not use form responses for advertising.

Where your data is stored

Form responses are stored in managed, replicated MongoDB Atlas databases; uploaded files are stored in Cloudflare R2. Data is encrypted at rest, and every connection to FormNest is served over TLS.

Data residency — choosing the region your submissions are stored in — is available on our Enterprise plan.

Who we share it with

We share data only with the service providers we rely on to run FormNest — principally MongoDB Atlas (database hosting) and Cloudflare R2 (file storage) — and only as far as they need it to provide those services. We may also disclose data where the law requires it.

How long we keep it

We keep your account data for as long as your account is active. Form responses are kept until you or the form's owner delete them, or until the account is closed. When data is deleted, it is removed from our active systems.

Your rights

Depending on where you live, you may have the right to access, correct, export, or erase your personal data, and to object to or restrict certain processing.

• —You can export the responses your forms collect as CSV at any time.
• —Right-to-erasure is built into the product as a workflow — you can remove a person's submissions and their attached files on request.

To exercise any of these rights, email privacy@formnest.com.

Children

FormNest is not directed at children, and is not intended for anyone under the age at which they can consent to data processing in their country.

Changes to this policy

We may update this policy as the product changes. When we do, we'll update the date at the top, and we'll flag material changes rather than quietly slipping them in.

Contact

Questions about this document, or about your data? Email us at privacy@formnest.com.