Privacy Policy

Last updated: March 27, 2026

1. Introduction

FormCatch ("we", "our", "us") operates the form backend service at formcatch.vercel.app. This Privacy Policy explains how we collect, use, store, and protect your information when you use our service.

2. Information We Collect

We collect the following types of information:

  • Account information: When you sign up via GitHub or Google OAuth, we receive your email address, display name, and profile avatar. We do not receive or store your passwords.
  • Form submission data: Data submitted through your form endpoints by your end users (e.g., names, email addresses, messages, and any other fields you define).
  • Usage data: We use Google Analytics to collect anonymized traffic statistics such as page views, referral sources, and device type. No personally identifiable information is tracked.
  • Technical data: IP addresses, browser type, and timestamps associated with form submissions for spam protection and abuse prevention.

3. How We Use Your Information

  • To provide and maintain the FormCatch service
  • To send email notifications when forms are submitted
  • To detect and prevent spam and abuse
  • To improve our service based on anonymized usage patterns
  • To communicate important service updates

4. Data Storage and Security

We take the security of your data seriously:

  • All data is transmitted over TLS (HTTPS) encryption
  • Form submission data is stored in encrypted databases
  • We use industry-standard security practices to protect our infrastructure
  • Access to user data is restricted to essential service operations only

5. Data Ownership and Export

You own all form submission data collected through your endpoints. You can export all your submissions as CSV at any time from your dashboard. You may also request complete deletion of your account and all associated data by contacting us.

6. Data Sharing

We do not sell, rent, or share your personal information or form submission data with third parties. We may share data only when required by law or to protect our legal rights.

7. Third-Party Services

  • GitHub / Google OAuth: Used for authentication only. We receive limited profile information as described above.
  • Google Analytics: Used for anonymized traffic statistics. You can opt out using browser extensions or privacy settings.
  • Vercel: Our hosting provider. Subject to Vercel's privacy policy.

8. Cookies

We use essential cookies for authentication and session management. Google Analytics may use cookies for traffic analysis. No advertising or tracking cookies are used.

9. Data Retention

We retain your account data and form submissions for as long as your account is active. You can delete individual submissions from your dashboard or request full account deletion at any time.

10. Your Rights

  • Access and export all your data at any time
  • Request deletion of your account and all associated data
  • Opt out of Google Analytics tracking
  • Contact us with any privacy concerns

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us at mocsa2025@gmail.com.