Privacy Policy
Effective Date: June 25, 2026
At FormsDB, we take the privacy and security of your personal data and form submission datasets very seriously. This Privacy Policy details our commitment to data protection, compliance, and our isolated tenant database sandbox architecture.
1. Zero-Collateral Data Architecture
Unlike traditional multi-tenant SaaS architectures that store all customer data in a single monolithic table, FormsDB employs a strict isolation model:
- Dedicated SQLite Containers: Every workspace is provisioned with a physically isolated SQLite database file.
- No Shared Storage Access: Your submission payloads never mix with other tenants.
- AES-256 Encryption: Locked/depleted connections are safely encrypted at rest.
2. Information We Collect
We collect information only as necessary to run and secure the platform:
- Account Metadata: Email, name, and workspace credentials.
- Billing Details: Credits purchased and transaction logs.
- Form Submission Schemas: Field types and validation configurations.
3. Data Retention and Deletion
- Self-Service Deletion: You can delete fields, forms, or entire workspaces at any time. When a workspace is deleted, its associated SQLite database is permanently purged from our block storage.
- Backup Offsites: Encrypted transaction logs are backed up for recovery and completely destroyed after 30 days.
4. Compliance and Governance
Our zero-bloat design ensures compliance with GDPR and CCPA protocols out of the box:
- We do not sell user data.
- We do not share telemetry with third-party tracking partners.
- Your form inputs are validated solely to compute credit consumption rates and schema consistency.