Privacy Policy

Last updated: December 26, 2025

Introduction

FormPop ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our ChatGPT app and web service at formpop.online.

Information We Collect

Account Information

When you use our dashboard features, we collect:

  • Email address (for magic link authentication and notifications)
  • Session tokens (stored as secure cookies for authentication)

Form Data

When you create and use forms through FormPop:

  • Form configurations (name, description, fields, styling, settings)
  • Form submissions (responses to your forms from end users)
  • Metadata (submission timestamps, user agent, referrer URL)

Usage Information

We automatically collect certain information when you use FormPop:

  • Browser type and version
  • Operating system
  • Referring website
  • Pages viewed and features used

How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain FormPop's services
  • Authenticate your access to your dashboard
  • Send you magic link emails for authentication
  • Send you email notifications when forms receive submissions
  • Store and deliver form submissions to you
  • Deliver webhooks to external services you configure
  • Improve and optimize our service
  • Respond to your requests and provide customer support

Data Sharing and Disclosure

Third-Party Services

We may share your information with the following categories of third parties:

  • Email Service Provider: We use Resend to send magic link and notification emails
  • Hosting Provider: We use Vercel to host and operate FormPop
  • Database Provider: We use Vercel Postgres to store form data
  • Webhook Recipients: If you configure a webhook, form submissions are sent to your specified URL

Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

Data Retention

We retain your information for as long as necessary to provide our services:

  • Forms and submissions are retained until you delete them
  • Forms expire automatically after their set expiration date (default: 30 days, maximum: 90 days)
  • Account information is retained while you have forms in your dashboard
  • Session cookies expire after 30 days

Your Rights and Controls

You have the following rights regarding your data:

  • Access: View all your forms and submissions in your dashboard
  • Export: Download submission data as CSV
  • Delete: Delete forms and submissions at any time
  • Correction: Update form configurations and settings
  • Opt-out: Sign out to end your session

Data Security

We implement appropriate technical and organizational security measures to protect your information, including:

  • HTTPS encryption for all data in transit
  • Secure session management with HTTP-only cookies
  • Database encryption at rest
  • Access controls and authentication requirements
  • Regular security updates and monitoring

Data We Do NOT Collect

FormPop does not collect:

  • Payment card information (PCI data)
  • Protected health information (PHI)
  • Government identifiers (SSN, passport numbers, etc.)
  • Passwords or API keys
  • Precise GPS coordinates or location data
  • Full chat logs or conversation history from ChatGPT

Important: While FormPop itself does not collect this sensitive data, users who create forms may configure fields that could collect such information from form respondents. Users are responsible for complying with applicable data protection laws when creating forms.

Children's Privacy

FormPop is suitable for general audiences including users aged 13-17. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. We take steps to ensure that your information receives an adequate level of protection.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last updated" date at the top of this policy. Your continued use of FormPop after any changes constitutes your acceptance of the updated Privacy Policy.

Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

← Back to FormPop