Privacy Policy

1. Who we are

FormDrop (“FormDrop”, “we”, “us”) is operated by [legal entity name], [registered address]. Contact: hello@getformdrop.com.

2. Two kinds of data, two roles

Account data - when you create a FormDrop account we are the data controller. Form submission data - when a visitor submits a form on a website you built, you (the account holder) are the controller of that visitor data and FormDrop acts as your processor: we store it and deliver it to you, on your instructions.

3. What we collect

• Account: email address and authentication credentials (managed by our auth provider).
• Form submissions:the fields your form collects (whatever you configure), plus the submitter’s IP address, user-agent, originating website, and a timestamp - used for spam filtering, security, and abuse prevention.
• Operational logs needed to run and secure the service.

We do not sell personal data and do not use it for advertising.

4. How we use it

To provide the service: store submissions, email lead alerts to your chosen address, filter spam, enforce plan limits, secure the platform, and communicate with you about your account.

5. Subprocessors

We rely on these providers to operate FormDrop:

• Supabase - database, authentication, hosting.
• Resend - outbound lead-notification email.
• Vercel - application hosting and CDN.

Data is hosted in [region]. Where data leaves your region, the transfer relies on [transfer mechanism, e.g. SCCs].

6. Retention

Submissions are kept until you delete them or close your account, after which they are removed within [N] days. Account data is kept for the life of the account. [Define any longer retention required for legal/billing reasons.]

7. Security

Data is encrypted in transit (HTTPS). Access is restricted by per-account row-level security and least-privilege controls. No method is perfectly secure, but we work to protect your data.

8. Your rights

Subject to applicable law (e.g. GDPR/CCPA) you may request access, correction, export, or deletion of your personal data, and may object to or restrict certain processing. Email hello@getformdrop.com. If you are a website visitor whose submission we process on behalf of an account holder, contact that website operator first; we will assist them as their processor.

9. Cookies

We use only essential authentication/session cookies needed to keep you signed in. No advertising or cross-site tracking cookies.

10. Children

FormDrop is not directed to children under 16 and we do not knowingly collect their data.

11. Changes

We may update this policy; material changes will be posted here with a new effective date.