Privacy Policy
Effective 5 November 2026
Form Backend (“we”, “the service”) is a form backend for websites, available at form-backend-tool.vercel.app. This page explains what data we collect, why, and the choices you have. Questions: mudassirshahbaz372@gmail.com.
What we collect
- Account data. Your name and email address when you sign up. If you sign in with Google or GitHub, we receive your name, email address and profile picture from that provider.
- Your forms and submissions. The forms you create and the submissions your forms receive. Submission content is provided by your own website visitors and is stored on your behalf so you can read it in your dashboard.
- Technical data. Basic logs and security signals needed to run the service and prevent abuse (for example request timestamps and rate-limit counters).
How we use it
- To provide the service: storing submissions and showing them in your dashboard.
- To send notifications: a submission notification email for each new submission, and a WhatsApp notification if you have enabled and verified that feature.
- To sign you in and keep your account secure.
- To enforce plan limits and prevent spam and abuse.
Who processes data for us
We use a small number of service providers, only for the purposes above: Supabase (database and authentication), Vercel (hosting), Resend (email delivery), Meta (WhatsApp notifications, only if you enable them), and Paddle (payments, as merchant of record for paid plans). We do not sell personal data, and we do not use advertising trackers.
Your choices
- You can export and delete your submissions from your dashboard at any time.
- To delete your account and its data, contact us at the email above and we will remove it.
- If you run forms on your own website, you are responsible for telling your visitors what data your forms collect.
Cookies
We use only essential cookies needed to keep you signed in. We do not use marketing or cross-site tracking cookies.
Security and retention
Data is stored with established infrastructure providers over encrypted connections. Submissions are kept until you delete them or close your account; spam submissions may be removed automatically as part of abuse prevention.
Children
The service is not directed at children under 13, and we do not knowingly collect their data.
Changes
If this policy changes, the updated version will be posted on this page. See also our Terms of Service.