Privacy Policy

Formbono (“we,” “us,” or “our”) operates the Formbono website and application at formbono.com (the “Service”). This Privacy Policy explains what information we collect, how we use it, and your rights with respect to it. By using our Service, you agree to the practices described here.

1. Information We Collect

Information you provide directly

• Account information: When you create an account, we collect your email address and, if you choose to provide it, your name.
• Billing information: When you subscribe to Formbono Pro, payment is processed by Stripe. We do not store your credit card number. We receive and retain your billing address and the last four digits of your card as provided by Stripe.
• Form sharing data: When you use the Send to Fill feature, we store the recipient’s email address, any message you include, and the field values submitted by the recipient.
• Contact form submissions: When you contact us through our contact form, we collect your name, email address, and message content.

Information collected automatically

• Usage data: We collect information about how you interact with the Service, including pages visited, forms searched, and features used.
• Log data: Our servers automatically record information such as your IP address, browser type, and referring URLs when you access the Service.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Service
• Process your subscription and manage your account
• Send transactional emails (share notifications, completion alerts, receipts)
• Respond to your support requests and inquiries
• Monitor for fraud, abuse, or violations of our Terms of Service
• Comply with legal obligations

We do not sell your personal information to third parties. We do not use your data for advertising purposes.

3. How We Share Your Information

We share your information only as necessary to operate the Service:

• Supabase: Our database and authentication provider. Your account data and form data are stored on Supabase infrastructure. Supabase Privacy Policy →
• Stripe: Our payment processor. Billing information is handled directly by Stripe. Stripe Privacy Policy →
• Resend: Our transactional email provider. Email addresses are shared with Resend solely for the purpose of delivering emails you have triggered. Resend Privacy Policy →
• Anthropic: We use Anthropic’s AI to generate form descriptions. Form metadata (titles, form numbers) may be sent to Anthropic’s API for this purpose. No personal account data is sent.
• Legal disclosure: We may disclose your information if required by law, subpoena, or court order, or if we believe in good faith that disclosure is necessary to protect our rights or the safety of others.

4. Form Sharing and Recipient Data

When you send a form to a recipient using our Send to Fill feature:

• The recipient’s email address is stored in our database and used solely to deliver the share notification email.
• Field values submitted by the recipient are stored in our database and made available only to the sender (you).
• Share links expire automatically after the period you select (7, 14, or 30 days). Expired data is retained for 90 days then purged.
• You are responsible for ensuring you have a lawful basis for sharing forms with and collecting information from recipients.

5. Data Retention

We retain your account information for as long as your account is active. If you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal or billing purposes. Form share records are retained for 90 days after expiry or completion, then deleted.

6. Security

We take reasonable technical and organizational measures to protect your information, including encrypted connections (HTTPS/TLS), hashed credentials, and access controls on our database. Share links use 128-bit random tokens. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Your Rights (California Residents — CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act:

• Right to know: You may request a copy of the personal information we have collected about you.
• Right to delete: You may request deletion of your personal information, subject to certain legal exceptions.
• Right to opt out of sale: We do not sell personal information, so this right does not apply.
• Right to non-discrimination: We will not discriminate against you for exercising any of these rights.

To exercise these rights, contact us at hello@formbono.com. We will respond within 45 days.

8. Cookies

We use session cookies and local storage to maintain your login state and remember your preferences (such as your active matter view). We do not use third-party advertising or tracking cookies.

9. Children’s Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new effective date. Continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or want to exercise your rights, contact us at: