Legal

Privacy Policy

Last updated: December 5, 2025

1. Introduction

FormDuo ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our form submission service and website at formduo.com (the "Service").

Please read this Privacy Policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Account Information

When you create an account, we collect:

  • Email address
  • Name (if provided)
  • Password (encrypted)
  • Account preferences

Form Submission Data

When forms are submitted through our Service, we collect and process:

  • Form field data submitted by end users
  • File attachments (for Plus/Pro plan users)
  • Submission timestamps
  • IP addresses (for spam prevention)
  • Browser and device information

Usage Information

We automatically collect certain information when you use our Service:

  • Log data (pages visited, time spent, etc.)
  • Device information
  • Browser type and version

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our Service
  • Process and deliver form submissions to your designated email
  • Display customized Thank You pages after form submissions
  • Send you technical notices and support messages
  • Respond to your comments and questions
  • Prevent spam, fraud, and abuse
  • Monitor and analyze usage patterns
  • Process payments and send billing information

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

  • Service Providers: We use third-party services like Firebase (data storage), Stripe (payments), and email providers to operate our Service.
  • Webhooks: If you configure webhooks, form submission data will be sent to the external URLs you specify. You are responsible for ensuring these destinations handle data appropriately.
  • Legal Requirements: We may disclose information if required by law or in response to valid legal requests.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred.

5. Webhooks and Third-Party Integrations

Our Service allows you to configure webhooks to send form submission data to external services (such as Slack, Discord, Zapier, or custom API endpoints). When you enable webhooks:

  • Form submission data is transmitted to the webhook URLs you configure
  • You are responsible for the privacy practices of the receiving services
  • We recommend only sending data to trusted and secure endpoints
  • Data sent via webhooks is transmitted over HTTPS

We are not responsible for how third-party services handle data received through webhooks. Please review the privacy policies of any external services you integrate with.

6. File Uploads and Storage

Plus and Pro plan users can accept file uploads through their forms. When files are uploaded:

  • Files are securely stored in Firebase Cloud Storage
  • Files are associated with the corresponding form submission
  • Files are accessible only via unique, secure download URLs
  • Files are automatically deleted when the associated submission is deleted
  • Certain file types are blocked for security reasons (executables, scripts, etc.)

You are responsible for ensuring you have the legal right to collect and store files uploaded through your forms, and for informing end users about how their files will be used.

7. Data Security

We implement appropriate technical and organizational measures to protect your data:

  • All data is transmitted over HTTPS/TLS encryption
  • Data is stored securely in Firebase with access controls
  • Passwords are hashed and never stored in plain text
  • Regular security reviews and updates

However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Data Retention

We retain your account information for as long as your account is active. Form submission data is retained according to your plan and preferences. You can delete your submissions at any time from your dashboard.

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal purposes.

9. Your Rights

You have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your information
  • Export your data in a portable format
  • Opt-out of marketing communications

To exercise these rights, please contact us at formduoinc@gmail.com.

10. Cookies

We use essential cookies to maintain your session and preferences. We do not use tracking cookies or sell data to advertisers.

11. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

13. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Email: formduoinc@gmail.com