Extended Cookies & Privacy Consent

We use cookies to analyze marketing traffic, monitor system errors, and track conversion events. Hashed/anonymized IPs are used by default unless you accept full tracking.

Legal Governance & Trust

Privacy Policy

Version 2.4 • Last updated June 25, 2026 • Isolated Database Sandbox Architecture

Key Takeaways

100% File Isolation: Separate physical SQLite containers per tenant. No mixed storage.
GDPR & CCPA Compliant: Zero tracking telemetry, instant self-service database purges.
Zero-Bloat Footprint: Fast load times, system font stacks, zero analytics scripts.

Privacy Policy

Effective Date: June 25, 2026

At FormsDB, we take the privacy and security of your personal data and form submission datasets very seriously. This Privacy Policy details our commitment to data protection, compliance, and our isolated tenant database sandbox architecture.


1. Zero-Collateral Data Architecture

Unlike traditional multi-tenant SaaS architectures that store all customer data in a single monolithic table, FormsDB employs a strict isolation model:

  • Dedicated SQLite Containers: Every workspace is provisioned with a physically isolated SQLite database file.
  • No Shared Storage Access: Your submission payloads never mix with other tenants.
  • AES-256 Encryption: Locked/depleted connections are safely encrypted at rest.

2. Information We Collect

We collect information only as necessary to run and secure the platform:

  • Account Metadata: Email, name, and workspace credentials.
  • Billing Details: Credits purchased and transaction logs.
  • Form Submission Schemas: Field types and validation configurations.

3. Data Retention and Deletion

  • Self-Service Deletion: You can delete fields, forms, or entire workspaces at any time. When a workspace is deleted, its associated SQLite database is permanently purged from our block storage.
  • Backup Offsites: Encrypted transaction logs are backed up for recovery and completely destroyed after 30 days.

4. Compliance and Governance

Our zero-bloat design ensures compliance with GDPR and CCPA protocols out of the box:

  • We do not sell user data.
  • We do not share telemetry with third-party tracking partners.
  • Your form inputs are validated solely to compute credit consumption rates and schema consistency.