Privacy Policy
Last updated: September 2026
This page explains what we collect about you and about the people who answer your forms, why, and how we protect it. We collect the least the service needs.
1.What we collect about account holders
Your name and email, your profile picture if you sign in with Google, your subscription and payment history, and AI usage records kept for billing and cost control.
2.What we collect about respondents
The answers they submit and the files they upload, the language they answered in, the referring source and the device type.
We do not store the IP address itself — only a salted hash of it, and only to stop automated submissions and spam.
Uploaded files (CVs, signatures) are stored without public links; only signed-in members of the form's workspace can open them.
3.How we use data
To run the service: displaying forms, storing responses, sending notifications, and analyzing responses when the form owner asks for it.
We do not sell data, and we do not use respondents' answers for our own marketing.
4.Service providers
We rely on trusted providers for specific jobs: hosting and storage, email delivery, the payment gateway, and AI models. When you use an AI feature, only the data that feature needs is sent to the model provider for processing.
Some of this data may be processed outside Saudi Arabia by those providers, under the safeguards the Personal Data Protection Law requires.
5.Retention and deletion
Forms and responses stay while your account exists. Deleting a form permanently deletes its responses and files.
You can ask to access or correct your data, or to delete your account, by contacting us from the settings page.
6.Security
Traffic is encrypted, access tokens and invitation links are stored hashed, and access to forms and responses is limited by workspace membership and role.