Privacy Policy

Effective May 1, 2026 · v2.0

This Privacy Policy explains what personal information FormBridge ("we", "us", "our") collects, how we use it, and the choices you have. It applies to the formbridge.ai website, the FormBridge dashboard, and the FormBridge API.

TL;DR summary

We collect only what we need to run the service: your account info, your form submissions, and basic usage logs.
We never sell, rent, or share your personal data or your form submissions to advertisers or data brokers.
Submissions and files are encrypted at rest and in transit. Access is logged and audited.
You can export or delete your data at any time, from the dashboard or by emailing hello@formbridge.ai.
We are GDPR-aligned and offer a Data Processing Agreement (DPA) on request.

Who we are

FormBridge is a product operated by FormBridge Labs B.V., registered in the Netherlands. For privacy matters, contact us at hello@formbridge.ai. For EU/UK GDPR requests, the same address is the contact point for our Data Protection Officer.

What we collect

We collect three categories of data:

Account information — your name, email, and (optionally) company name when you sign up. If you pay, billing details handled by Stripe; we never see your card number.
Form submissions — the data submitted to forms you've created. This is yours; we are a processor for this data and act on your instructions.
Usage data — basic logs of dashboard activity (which forms you opened, which settings you changed) and API requests. We keep these for 90 days for debugging and abuse prevention.

Why we collect it

To run the service, to keep it secure, and to support you when you ask for help. Specifically:

Provide the service — receiving, validating, storing, and routing your form submissions.
Communicate with you — service announcements, security notices, and the support thread when you open a ticket.
Protect the platform — detecting and blocking spam, abuse, and unauthorized access.
Comply with the law — tax records, fraud prevention, and legal requests where we're required to respond.

Form submissions

Form submissions belong to you. You are the data controller; we are a data processor acting on your instructions. We use submission content only to deliver the service — sending notifications, firing webhooks, storing the data for your access. We do not analyse, profile, or mine submission content.

You decide what your forms collect. If you collect sensitive categories of personal data (health, financial, biometric), you are responsible for the appropriate legal basis and we encourage you to use end-to-end encryption layers in addition to ours.

Cookies

We use a minimal set of cookies. Specifically:

Strictly necessary — session cookies to keep you signed in. No analytics piggyback on these.
Preferences — to remember your dashboard preferences (theme, default form, etc.).

We do not use third-party advertising cookies. The marketing site uses a privacy-respecting analytics tool (Plausible) that doesn't set cookies or track you across sites.

We share data only with the subprocessors we need to run the service. Each is bound by a data processing agreement with terms at least as strong as ours.

Cloudways (Digital Ocean) — hosting, storage, and infrastructure.
MongoDB — database for form submissions and account data.
Stripe (United States) — billing, when applicable.
Postmark (United States) — outbound platform email, when you don't use your own SMTP.
Sentry (United States) — error tracking, sampled and scrubbed of submission content.
GitHub — code repository and version control for platform management.

A current list with details is at formbridge.ai/terms. We notify you of changes via the dashboard.

Data retention

Form submissions — kept for as long as your account exists, or until you delete them. You can configure automatic deletion (e.g. delete after 90 days) per form.
Account data — kept for as long as your account exists. Deleted within 30 days of account closure.
Usage logs — 90 days. After that, only aggregate metrics remain.
Backups — 30 days, rolling. Deletions propagate to backups within that window.

Your rights

If you're in the EU, UK, or any jurisdiction with comparable privacy law (Brazil, California, Canada), you have rights to access, correct, export, delete, and restrict processing of your personal data. Most of these you can exercise directly from the dashboard. For anything you can't do there, email hello@formbridge.ai and we'll respond within 30 days.

Children

FormBridge is not directed to children under 16, and we don't knowingly collect personal data from them. If you believe we have, please contact us and we'll delete it.

Changes to this policy

If we change this policy in a way that affects you, we'll email account holders and post a notice in the dashboard at least 30 days before changes take effect. Smaller wording changes will appear here with an updated version number; the changelog at the bottom of this page lists what changed and why.

Contact

For anything privacy-related: hello@formbridge.ai

Postal address: Concatstring Solutions LLC, 1251 N Eddy St, Suite 200 – #3226 South Bend, IN 46617 United States

Changelog · v2.0, May 1, 2026 — added per-form auto-deletion policy detail; clarified subprocessor list. · v1.0, Mar 1, 2026 — initial policy.