FlowForm Privacy Policy

We collect account information such as your name, email address, organization details, login activity, billing status, and support communications.

When you create forms, we store form content, settings, response data, analytics, team member permissions, and related operational records needed to provide the service.

When you connect Google integrations, FlowForm may access the Google account information, spreadsheets, files, folders, and metadata that you authorize through Google's OAuth consent flow.

We use your information to create and manage forms, collect responses, provide analytics, support collaboration, process billing, secure accounts, prevent abuse, and improve reliability.

Google Sheets and Google Drive data is used only to provide the integration features you request, such as selecting a destination spreadsheet, writing form responses, reading relevant spreadsheet structure, or managing files needed for the connected workflow.

We do not sell your personal information or Google user data.

FlowForm's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We do not use Google Workspace API data to develop, improve, or train generalized artificial intelligence or machine learning models.

We only request Google permissions needed for user-facing features, and you can revoke FlowForm's Google access at any time from your Google Account permissions page.

We share information with service providers that help us operate FlowForm, including hosting, database, authentication, payments, email delivery, analytics, monitoring, and customer support providers.

These providers may process information only as needed to provide services to FlowForm and are not permitted to use it for their own unrelated purposes.

We may disclose information if required by law, to protect rights and safety, or in connection with a business transfer such as a merger, acquisition, financing, or sale of assets.

We keep information for as long as needed to provide FlowForm, comply with legal obligations, resolve disputes, maintain security, and enforce agreements.

You can request deletion of your account or organization data by contacting us. Some information may remain in backups, logs, billing records, or security records for a limited period where required for legitimate business or legal purposes.

Disconnecting a Google integration prevents new access through that connection, but it does not automatically delete data already imported into or created by FlowForm.

We use administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, and disclosure.

No online service can guarantee absolute security. You are responsible for keeping your account credentials safe and for managing access granted to your team members and integrations.

You may access, update, export, or delete certain information from your FlowForm account settings, depending on your plan and role.

You may unsubscribe from non-essential emails, manage team access, disconnect integrations, and revoke OAuth permissions from your Google Account at any time.

Depending on your location, you may have privacy rights such as access, correction, deletion, portability, objection, restriction, or appeal. Contact us to exercise those rights.

FlowForm may process and store information in the United States and other countries where we or our service providers operate.

By using FlowForm, you understand that your information may be transferred to countries with data protection laws different from those in your location.

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date and provide additional notice when appropriate.