RichForms ("we", "us") operates a no-code online form platform available at richforms.com (the "Service"). This Privacy Policy explains what personal data we collect, why we collect it, and the choices you have. It applies to visitors of our marketing site and to users of the Service (account holders and the people who fill in the forms you create).
1. Data controller
The data controller is [Legal entity name], operating RichForms. For any privacy question, contact our privacy team at [email protected]
2. What we collect
2.1 Account & profile
When you register we collect your email address, phone number, display name and password. Passwords are stored hashed and are never kept in plain text.
2.2 Form submission data
When people submit the forms you create, that content is stored in your tenant. You decide what questions to ask; we process that content on your behalf as a data processor. Sensitive fields (for example ID numbers) require the submitter's separate, explicit consent, which is captured through our built-in authorization mechanism before any sensitive value is stored.
2.3 Usage & technical data
We log IP address, browser and device type, pages viewed and timestamps to secure the Service, prevent abuse and diagnose issues.
2.4 Cookies
See the cookie section below and the consent banner shown on your first visit.
2.5 Billing
If you subscribe to a paid plan, our payment processor collects card and billing details; we keep the billing records required for accounting.
2.6 MCP connector
If you connect an AI assistant through our MCP connector, we process the instructions you authorize and the form or approval actions you trigger.
3. How we use data
To provide and secure the Service, authenticate you, send the notifications you request (SMS / email), calculate usage and billing, provide support, and comply with law.
4. Legal basis (GDPR)
We rely on performance of contract (to operate your account), legitimate interests (security and product improvement) and consent (non-essential cookies and optional marketing). You may withdraw consent at any time without affecting prior processing.
5. Sharing with third parties
We share data only with vetted sub-processors that are necessary to run the Service: an SMS gateway, an email delivery service, cloud hosting and a payment processor. We do not sell personal data.
6. International transfers
As a global service, data may be processed outside your country of residence. Where required by law we use Standard Contractual Clauses or equivalent safeguards.
7. Data retention
Account data is kept while your account is active and for a limited period afterwards as required by law. Form submission data is retained according to your plan and tenant settings; you can export or delete it at any time from your dashboard.
8. Your rights
Depending on your jurisdiction you may access, correct, delete, restrict or port your data, and object to certain processing. To exercise these rights, email [email protected]. We respond within the statutory timeframe.
9. Cookies & similar technologies
We use strictly necessary cookies to remember your language and keep you logged in. Non-essential cookies (analytics, preferences) are only set after you accept them through our consent banner. You can clear or block cookies in your browser; doing so may affect site functionality.
10. Changes
We may update this Policy and will post the new version with a revised date. Material changes will be notified by email or an in-product notice.
11. Contact
Privacy officer: [email protected].