Effective date: 26/02/2026
This Privacy Policy explains how Forms IQ handles personal data relating to (1) form builders (app users) and (2) form respondents.
We collect the following data about app users to deliver the service and improve the product:
| Data point | Why | Stored where | Retention |
|---|---|---|---|
| Email address (userPrincipalName) | Identifies the user account | Azure Cosmos DB | Until account deletion |
| Session start/end timestamps and duration | Measure app engagement | Cosmos DB, per-user aggregate counters | Until you request deletion, at which point aggregate analytics are anonymized (aggregate only, no raw timestamps) |
| Form creation method (AI / template / manual) | Improve product features | Cosmos DB | Until you request deletion, at which point aggregate analytics are anonymized |
| Onboarding profile (name, industry, company size, use case) | Personalize the experience | Cosmos DB | Until account deletion |
| Personalization completed or skipped | Improve onboarding flow | Cosmos DB | Until you request deletion, at which point aggregate analytics are anonymized |
Lawful basis: Legitimate interest (product improvement) and performance of contract (service delivery).
Deletion rights: Users can request deletion by emailing support@aicarpus.com. Account and associated data will be deleted within 30 days.
This data is collected on behalf of the form creator. FormsIQ acts as a data processor; the form creator is the data controller.
| Data point | When collected | Who sees it |
|---|---|---|
| Form answers | Always, on submission | Form creator only |
| Browser/device info (userAgent) | Always, on submission | Form creator only |
| Completion time (start → submit duration) | When enabled by form creator | Form creator only |
| Field interaction timestamps (first touch, last change per field) | When enabled by form creator | Form creator only |
| Geographic location (latitude, longitude, accuracy) | When enabled by form creator AND respondent grants browser permission | Form creator only |
| Distribution open tracking (email campaign links) | When the form is opened via a campaign link | Form creator only |
Important notice to respondents: Respondents always see a notice in the form footer when metadata beyond their answers is being collected. For location, respondents are explicitly asked to consent before their browser permission is requested.
Retention: Response data is stored for as long as the form creator's account is active. Creators can delete individual responses or all responses at any time. When an account is deleted, all associated response data is deleted within 30 days.
Respondent deletion rights: Respondents should contact the form creator directly to request deletion of their response. If the form creator cannot be reached, contact support@aicarpus.com and include the form URL.
Forms IQ includes optional AI-powered features for form creation and assistance. When you use these features, content you submit—such as prompts, instructions, form titles, questions, descriptions, and related text—may be transmitted to and processed by Microsoft Azure services, including Azure OpenAI Service, solely to provide the AI functionality you request.
Forms IQ uses Azure OpenAI as a service provider/processor to generate requested AI outputs. Forms IQ does not use your prompts, form content, or AI outputs to create advertising profiles or for unrelated marketing purposes.Unless explicitly stated for a particular feature, Forms IQ does not maintain a separate long-term repository of prompts or AI outputs beyond what is necessary to operate the service, maintain security, troubleshoot issues, and comply with legal obligations.
For more information about how Microsoft processes data submitted to Azure OpenAI Service, see:
-Azure OpenAI data privacy.
-Azure OpenAI transparency note.
We use your browser's local storage (not cookies) to remember your preferences and session state. This includes whether you have completed onboarding, your A/B test group assignment, your terms acceptance, and UI preferences.
This data stays in your browser and is not transmitted to our servers. You can clear it at any time by clearing your browser's site data.
Your data is stored on Microsoft Azure infrastructure. Where AI-powered features are used, relevant content may also be processed by Microsoft Azure OpenAI Service in order to provide the requested functionality. Azure complies with GDPR and provides Standard Contractual Clauses for international data transfers. See Microsoft's privacy commitments and Azure OpenAI documentation:
-Microsoft Privacy Statement.
-Azure OpenAI data privacy.
Data is encrypted in transit (TLS) and at rest. Access is restricted to authorized personnel and sub-processors listed below.