Privacy

Your data supports your forms, not an advertising profile.

This policy explains the information Formza uses to operate accounts, forms, responses and analytics, and how payment data is handled when paid subscriptions are enabled.

Data we store

We may store account details, forms, responses, uploads, settings and operational records needed to run the service, plus information you send when contacting support.

Usage analytics

To provide form analytics and improve the service, we may record first-party visitor and session identifiers, source and referrer, language, browser, operating system, device type, approximate location, field interactions and completion time. We do not use this information to build a cross-site advertising profile. On Formza's own pages, not on published forms, we use Google Analytics to measure visits; it sets Google's own cookies, with Google signals and ad personalisation turned off.

Scanning a QR code

When someone scans a Formza QR code we record the scan: device type, operating system, browser, phone language, country and campaign source if any, with a random visitor ID that we keep only as a hash that changes every day. We do not store the IP address. If the code's owner routes visitors by branch location, the scan page asks for the visitor's location once, with their permission; it is used to choose the page, and its coordinates are not stored. We keep only which rule was chosen and whether the visitor was inside one of the owner's branches.

Payment data

Paid subscriptions are completed on an encrypted payment page hosted by a certified payment provider, so your card details never reach Formza and are never stored by us. We keep only what is needed to know your plan and its renewal date.

Control and deletion

You can manage your forms and responses and delete information through the controls available in your account. Some records may be retained where needed for security, transaction reconciliation, fraud prevention or legal obligations.

Uploaded files and how long they stay

A file a respondent uploads stays available to the form's owner for 7 days on the Free plan and 30 days on Pro. The window starts at upload and is not extended when the response is submitted; after it the file is deleted from the database. A form owner can choose a shorter window, and cannot exceed the one their plan grants.

Unfinished responses and how long they stay

When a form owner turns on saved progress, what a respondent types is kept as they go so they can come back and finish. It is deleted the moment they submit or clear it; one that is never finished stays 7 days on the Free plan and 30 days on Pro, counted from the last time the respondent touched it, and is then deleted.

Availability and backups are separate

Files are stored inside the database itself, so a backup taken before the window ends contains a copy of the file and keeps it until that backup's own cycle ends. Backups are used only to restore the service after a failure and are not reachable from an account.

Security and service providers

We use access controls, request validation, rate limits and other safeguards. We may rely on infrastructure and operational providers where needed to deliver Formza, with each provider processing information according to its role and obligations. Links that QR codes and forms send visitors to are checked with Google Web Risk; only the link itself reaches Google, with nothing about the visitor or the form owner.

Form owner responsibility

If you create a form that collects personal or sensitive information, you are responsible for having an appropriate lawful basis and for providing notices and obtaining consent required by laws that apply to your use.