Private beta Request access
Back to home

Privacy Policy

Last updated: March 2026

At formcel, we take your privacy seriously. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our platform and services.

1. Data We Collect

  • Account information — When you create an account, we collect your name, email address, and password. If you sign up through a third-party provider (e.g., Google), we receive your name and email from that provider.
  • Usage data — We collect information about how you interact with our platform, including pages visited, features used, forms created, and timestamps of activity.
  • Form and submission data — We store the forms you create and the submissions you receive. This data belongs to you and is processed on your behalf.
  • Device and browser information — We collect your IP address, browser type, operating system, and device identifiers for security and analytics purposes.
  • Payment information — If you subscribe to a paid plan, our payment processor collects your billing details. We do not store full credit card numbers on our servers.

2. Data Storage and Security

All data is encrypted at rest using AES-256 and in transit using TLS 1.3. We use isolated database instances per customer to ensure your data never co-mingles with another customer's data.

Data is stored in the region you select during account setup. We support 42 global regions across Google Cloud, AWS, and Azure. Your data does not leave your selected region unless you explicitly configure cross-region replication.

Access to production systems is restricted to authorized personnel using multi-factor authentication and audit-logged access controls.

3. Data Sharing

We do not sell your personal data. We share data only in the following circumstances:

  • Service providers — We work with a limited number of sub-processors (infrastructure providers, payment processors, email delivery services) who process data on our behalf under strict data processing agreements.
  • Legal obligations — We may disclose data when required by law, court order, or government request.
  • Safety — We may share data when necessary to protect the safety, rights, or property of formcel, our users, or the public.
  • With your consent — We may share data when you explicitly authorize us to do so.

4. Data Retention

We retain your account data for as long as your account is active. Form submission data is retained according to the retention settings you configure for each form.

When you delete your account, we permanently erase all personal data within 30 days. Backups containing your data are purged within 90 days. Some anonymized, aggregated data may be retained for analytics purposes.

5. Cookies

  • Session cookie — A secure, HTTP-only cookie used solely for authentication. It is created when you log in and cleared when you log out or it expires.
  • Language preference — Your selected language is stored in your browser's local storage so the interface loads in the correct locale. No cookie is used for this purpose.

The session cookie is the only cookie formcel sets. We do not use analytics cookies, advertising cookies, third-party tracking pixels, or cross-site tracking of any kind.

6. Your Rights (GDPR)

If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation:

  • Right of access — Request a copy of the personal data we hold about you.
  • Right to rectification — Request correction of inaccurate or incomplete personal data.
  • Right to erasure — Request deletion of your personal data ("right to be forgotten").
  • Right to data portability — Receive your data in a structured, machine-readable format and transfer it to another provider.
  • Right to restriction — Request that we limit the processing of your personal data.
  • Right to object — Object to the processing of your personal data for certain purposes, including direct marketing.

To exercise any of these rights, contact us at privacy@formcel.com. We will respond within 30 days.

7. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Email: privacy@formcel.com

formcel, Inc. — Data Protection Office