Privacy Policy

1. Who controls your data

Nirmal Kori, trading as Formblyt ("Formblyt", "we", "us"), is the data controller for personal data processed through the service. Questions or privacy requests may be sent to privacy@formblyt.com.

2. Data we collect

• Account data, including your name, email address, authentication identifiers, and profile details.
• Content and form data, including forms, prompts, responses, files, signatures, and settings you submit or create.
• Usage and technical data, including feature activity, log data, IP address, browser, device, timestamps, and diagnostic information.
• Communications, including support requests, feedback, and related correspondence.
• Cookie and preference data needed to operate the service and remember your choices.

Paddle, our Merchant of Record, independently collects and processes payment details needed to complete purchases. Formblyt does not store full card details.

3. Why we use data and our legal bases

• Contract performance: creating accounts, providing forms and related features, processing subscriptions, and delivering support.
• Legitimate interests: securing the service, preventing abuse and fraud, diagnosing faults, measuring performance, and improving Formblyt.
• Consent: optional marketing communications and non-essential cookies, where required. Consent can be withdrawn at any time.
• Legal obligation: complying with applicable accounting, tax, consumer-protection, and lawful disclosure requirements.

4. How data is shared

We share data only as reasonably necessary with hosting, infrastructure, analytics, communications, and support providers; Paddle for sales, subscription management, payments, tax compliance, invoicing, returns, and customer-service functions; professional advisers; and public authorities where legally required. We may also transfer data as part of a merger, financing, acquisition, or sale, subject to appropriate safeguards.

5. International transfers

Some providers may process data outside your country. Where UK or EEA data is transferred internationally, we use an adequacy decision, Standard Contractual Clauses, or another lawful safeguard as applicable.

6. Retention

We keep account and service data while your account is active and for a reasonable period afterward to provide exports, resolve disputes, enforce agreements, and meet legal obligations. Security and transaction records may be retained longer where required. When data is no longer needed, it is deleted or anonymised.

7. Your rights

Depending on your location, you may request access, correction, deletion, restriction, portability, or objection to processing, and may withdraw consent. UK and EEA users may complain to their local supervisory authority. We generally respond to verified requests within one month where GDPR applies. Contact privacy@formblyt.com to exercise these rights.

8. Security

We use appropriate technical and organisational measures designed to protect personal data, including access controls, encryption in transit, managed infrastructure, monitoring, and restricted administrative access. No system can guarantee absolute security.

9. Cookies

Formblyt uses essential cookies and similar storage for authentication, security, and preferences. Analytics or marketing technologies are used only where permitted and, when required, after consent. You can manage cookies through browser controls, though blocking essential cookies may prevent parts of the service from working.

10. Changes

We may update this notice as Formblyt or applicable law changes. We will post the revised version here and update the date above, with additional notice for material changes where appropriate.