Effective date: 26/02/2026
This Privacy Policy explains how Forms IQ handles personal data relating to (1) form builders (app users) and (2) form respondents.
We collect the following data about app users to deliver the service and improve the product:
| Data point | Why | Stored where | Retention |
|---|---|---|---|
| Email address (userPrincipalName) | Identifies the user account | Azure Cosmos DB | Until account deletion |
| Session start/end timestamps and duration | Measure app engagement | Cosmos DB, per-user aggregate counters | Until you request deletion, at which point aggregate analytics are anonymized (aggregate only, no raw timestamps) |
| Form creation method (AI / template / manual) | Improve product features | Cosmos DB | Until you request deletion, at which point aggregate analytics are anonymized |
| Onboarding profile (name, industry, company size, use case) | Personalize the experience | Cosmos DB | Until account deletion |
| Personalization completed or skipped | Improve onboarding flow | Cosmos DB | Until you request deletion, at which point aggregate analytics are anonymized |
Lawful basis: Legitimate interest (product improvement) and performance of contract (service delivery).
Deletion rights: Users can request deletion by emailing support@aicarpus.com. Account and associated data will be deleted within 30 days.
This data is collected on behalf of the form creator. FormsIQ acts as a data processor; the form creator is the data controller.
| Data point | When collected | Who sees it |
|---|---|---|
| Form answers | Always, on submission | Form creator only |
| Browser/device info (userAgent) | Always, on submission | Form creator only |
| Completion time (start → submit duration) | When enabled by form creator | Form creator only |
| Field interaction timestamps (first touch, last change per field) | When enabled by form creator | Form creator only |
| Geographic location (latitude, longitude, accuracy) | When enabled by form creator AND respondent grants browser permission | Form creator only |
| Distribution open tracking (email campaign links) | When the form is opened via a campaign link | Form creator only |
Important notice to respondents: Respondents always see a notice in the form footer when metadata beyond their answers is being collected. For location, respondents are explicitly asked to consent before their browser permission is requested.
Retention: Response data is stored for as long as the form creator's account is active. Creators can delete individual responses or all responses at any time. When an account is deleted, all associated response data is deleted within 30 days.
Respondent deletion rights: Respondents should contact the form creator directly to request deletion of their response. If the form creator cannot be reached, contact support@aicarpus.com and include the form URL.
We use your browser's local storage (not cookies) to remember your preferences and session state. This includes whether you have completed onboarding, your A/B test group assignment, your terms acceptance, and UI preferences.
This data stays in your browser and is not transmitted to our servers. You can clear it at any time by clearing your browser's site data.
Your data is stored on Microsoft Azure infrastructure. Azure complies with GDPR and provides Standard Contractual Clauses for international data transfers. See Microsoft's privacy commitments.
Data is encrypted in transit (TLS) and at rest. Access is restricted to authorized personnel and sub-processors listed below.