Privacy Policy

1. Information We Collect

We collect only the minimum information required to operate and secure the FormFork platform:

• Account Information: Your name, email address, hashed password, and billing tier when you register on formfork.io.
• Form Submissions Data: Payloads submitted to your /f/{form_id} endpoints, which we process as a data processor on your behalf.
• Usage & Analytics Telemetry: Aggregate traffic metrics, spam-filter telemetry, and Google Analytics pageview events to improve service reliability.

2. How We Process Form Submissions

Form submissions sent to your endpoints belong strictly to you. FormFork never sells, rents, or shares your form submission payloads with third-party advertisers. Submissions are transmitted over TLS/HTTPS and are only forwarded to external destinations (such as email recipients or webhook URLs) that you explicitly configure in your dashboard.

3. WordPress Plugin & Android Companion App

When you connect the FormFork Connect WordPress plugin or log in via the FormFork Android app, authentication occurs over encrypted HTTPS tokens. You can revoke API keys, static embed tokens, or active sessions at any time from your account dashboard.

4. Data Retention & Deletion Rights (GDPR / CCPA)

You can export your submissions (CSV/JSON) or permanently delete individual submissions, entire forms, or your account from the FormFork dashboard. Upon deletion, associated submission records are purged from active storage.

5. Security Measures

We implement industry-standard safeguards including bcrypt password hashing, JWT authentication, CORS origin validation, honeypot bot protection, and scoped static embed tokens.

6. Privacy Inquiries & Data Protection Contact

If you have any questions regarding this Privacy Policy or wish to exercise your data rights, please contact our privacy team at support@formfork.io or hello@formfork.io.