Privacy Policy
Privacy Policy Overview
At ZenForms, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you use our form-building platform.
This policy applies to all users of ZenForms, including those using our free and paid services. By using ZenForms, you agree to the collection and use of information in accordance with this policy.
Information We Collect
We collect several types of information to provide and improve our services:
Account Information
When you create an account, we collect your email address, name, and password. We may also collect profile information you voluntarily provide, such as your company name or avatar.
Form Data and Content
We store the forms you create, including field definitions, settings, and configurations. We also collect form submission data when users submit your forms, subject to your form settings and privacy preferences.
Usage Data
We automatically collect information about how you use our service, including pages visited, features used, time spent, and interaction patterns. This helps us improve our service and user experience.
Technical Data
We collect technical information such as IP address, browser type, device information, and access times. This data helps us ensure service security and performance.
How We Use Your Information
We use your information for various purposes to provide and improve our services:
Service Provision
To create and manage your account, provide form-building tools, process form submissions, and deliver the core functionality you expect from ZenForms.
Communication
To send you important account notifications, service updates, security alerts, and marketing communications (with your consent).
Service Improvement
To analyze usage patterns, conduct research, and develop new features that enhance our platform and user experience.
Security and Compliance
To detect and prevent fraud, abuse, and security threats, and to comply with legal obligations and regulatory requirements.
Data Sharing and Disclosure
We may share your information in limited circumstances:
With Your Consent
We share information when you explicitly direct us to, such as when you authorize third-party integrations or share forms with collaborators.
Service Providers
We work with trusted third-party service providers who help us operate our service, such as hosting providers, payment processors, and analytics services.
Legal Requirements
We may disclose information when required by law, court order, or government request, or to protect our rights, property, or safety.
Data Hosting and Security
Your data is hosted on dedicated Amazon Web Services (AWS) infrastructure in Frankfurt, Germany (eu-central-1.compute.amazonaws.com). We implement strict data protection and isolation measures:
Encryption Standards
All traffic in transit is encrypted using TLS 1.3 / HTTPS. All files and database storage are encrypted at rest using AES-256.
Isolated Internal Database
Our MongoDB database runs locally inside the application instance with zero public internet exposure or external access. Only internal services bound to localhost can communicate with the database, eliminating external network attack vectors.
EU Cloud Infrastructure
Our server environment is provisioned in AWS region eu-central-1 with strict firewall rules, automated OS patching, and network isolation.
Access Control
Access is strictly restricted with role-based policies and multi-factor authentication. Form data and submission records are strictly segregated per account.
Data Retention
We retain your information only as long as necessary to provide our services, comply with legal obligations, and resolve disputes. You can request deletion of your account and data at any time through your account settings.
Your Rights and Choices
You have several rights regarding your personal information:
Access and Correction
You can access and update your account information through your profile settings or by contacting our support team.
Deletion
You can delete your account and associated data at any time. Some information may be retained for legal or legitimate business purposes.
Communication Preferences
You can opt out of marketing communications at any time and manage your notification preferences in your account settings.
International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.
Children's Privacy
ZenForms is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware of such collection, we will take steps to delete it promptly.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through our service. Your continued use of ZenForms after such changes constitutes acceptance of the updated policy.
Contact Information & Data Requests
If you have questions about this Privacy Policy, wish to request a Data Processing Addendum (DPA), or want to exercise your rights to export or delete data, contact our team:
Support & Privacy Requests
Email: support@zenforms.net (Response timeframe: within 30 days)
Data Processing Agreements (DPA)
We provide standard GDPR-compliant DPAs for teams and organizations processing third-party personal data. Email support@zenforms.net to request a signed DPA.