Back to home

Privacy Policy

Last updated: March 2026

Introduction

FormQ ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you use our platform at formq.dev and its subdomains.

Data We Collect

We collect the following types of information:

  • Account data: name, email address, and password (hashed)
  • Organization data: organization name, member roles, and settings
  • Form data: form schemas, field configurations, and settings you create
  • Response data: submissions collected through your published forms
  • File data: files uploaded via presigned URLs (avatars, logos, attachments)
  • Usage data: IP address, browser type, and interaction logs for rate limiting and security

How We Use Your Data

  • Providing and maintaining the FormQ platform and its features
  • Sending transactional emails (invitations, role changes, support responses)
  • Ensuring security through rate limiting, session management, and abuse prevention
  • Improving our service through anonymized usage analytics

Data Storage

Your data is stored securely using industry-standard providers. Structured data (accounts, forms, responses) is stored in PostgreSQL hosted by Neon. Files (avatars, logos, attachments) are stored in Cloudflare R2. Session data and rate limiting use Redis hosted by Upstash. All data is encrypted in transit (TLS) and at rest.

Third-Party Processors

We use the following third-party services to operate FormQ:

  • Neon — PostgreSQL database hosting (structured data)
  • Cloudflare — DNS, CDN, WAF, R2 file storage, and DDoS protection
  • Resend — Transactional email delivery
  • Railway — API server hosting
  • Vercel — Dashboard and website hosting, web analytics

Cookies

We use essential cookies only: a session cookie for authentication (better-auth.session_token), a locale preference cookie (NEXT_LOCALE), and a theme preference cookie. We do not use advertising or tracking cookies. See our Cookie Policy for details.

Your Rights

You have the following rights regarding your data:

  • Access: Request a copy of your data at any time
  • Rectification: Update or correct your personal information via Settings
  • Deletion: Delete your account and all associated data via Settings > Delete Account
  • Export: Export your form responses in CSV or JSON format

Data Retention

We retain your data for as long as your account is active. When you delete your account, all personal data, forms, and responses are permanently removed within 30 days. Anonymized usage statistics may be retained indefinitely.

Contact Us

If you have questions about this Privacy Policy, contact us at privacy@formq.dev or use our contact form at formq.dev/contact.