Skip to content

GDPR and the data processing agreement

FormsAI is your processor for respondents' answers. The DPA, sub-processors and your responsibilities.

Written by
Updated

Every plan
On this page

For the answers people give your forms, you're the controller and FormsAI is your processor. The data processing agreement sets that out, and applies to every account.

Who helps run FormsAI

  • Cloudflare: hosting, database, file storage and spam protection.
  • Polar: billing for FormsAI Pro.
  • Resend: account and notification emails.
  • Stripe: payments in forms, under your own Stripe account.
  • Google: optional sign-in, and Sheets and Drive if you connect them.
  • Apple and Expo: optional Sign in with Apple and app notifications.
  • OpenAI: AI features, for Pro owners who use them.
  • Sentry: crash reports, which never include form answers.

Your part

  • Tell respondents what you collect and why, for example with a Checkbox or Legal question linking to your privacy notice.
  • Only ask for what you need, and delete responses you no longer need.
  • If respondents haven't agreed to AI analysis, turn it off.
  • Don't collect passwords, full card numbers or government ID numbers in questions.

Read the privacy policy for the full detail.

Related articles