Privacy Policy
Last updated 7 July 2026
1. Who we are
Formever (“we”, “us”, “our”) is a form-building service that lets you create, publish, and collect responses to online forms. This policy explains what personal data we handle and your rights under UK data protection law (the UK GDPR and the Data Protection Act 2018).
If you have any questions, contact us at hello@formever.app.
2. The data we collect
Account data. When you sign up we (through our authentication provider, Clerk) process your name, email address, and login identifiers.
Payment data. Payments are processed by Stripe. Stripe handles your card details directly — we never see or store your full card number. We keep a record of each purchase (amount, credits bought, and the Stripe payment reference).
Forms and responses. We store the forms you build and the responses submitted to them. Responses, and any files uploaded to them, may contain personal data that your respondents provide.
Usage and technical data. We process limited technical data such as your IP address (used to protect forms from spam and to show prices in your local currency) and, where enabled, anonymous product analytics. We use essential cookies to keep you signed in.
3. How and why we use it
- To provide the service — building forms, publishing them, and collecting responses.
- To process your payments and maintain your credit balance.
- To send you service emails, such as new-response notifications.
- To protect the service and prevent abuse or fraud.
- To understand and improve how the product is used.
Our lawful bases are performance of our contract with you, our legitimate interests in running and securing the service, and, where relevant, your consent.
4. Who we share it with
We use trusted service providers (sub-processors) to run Formever. They process data on our behalf under contract:
- Clerk — account and authentication
- Stripe — payment processing
- Neon — database hosting
- Cloudflare R2 — file storage
- Vercel — application hosting
- Resend — transactional email
- PostHog — product analytics (when enabled)
- Upstash — abuse protection / rate limiting
Some of these providers are based outside the UK. Where personal data is transferred internationally, it is protected by appropriate safeguards such as the UK International Data Transfer Agreement or equivalent. We do not sell your personal data.
5. Form responses — controllers and processors
When you build a form and collect responses, you decide what data to collect and why, so you are the data controller for those responses, and Formever acts as a processor on your behalf. You are responsible for having a lawful basis to collect that data and for telling your respondents how you will use it. Where Formever itself decides how data is used (for example, your account and payment data), we are the controller.
6. How long we keep it
We keep your forms and responses until you delete them or close your account. You can delete individual responses, whole forms (which also deletes their responses and uploaded files), and stop a form from accepting new responses at any time. Payment records are retained as long as required for accounting and legal purposes.
7. Your rights
Under UK data protection law you have the right to:
- Access the personal data we hold about you.
- Ask us to correct inaccurate data.
- Ask us to delete your data (the right to erasure).
- Object to or restrict certain processing.
- Receive your data in a portable format.
- Withdraw consent where we rely on it.
To exercise any of these, email hello@formever.app. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk. If your query concerns responses collected through someone else’s form, please contact that form’s owner, who is the controller of that data.
8. Cookies
We use essential cookies that are necessary to keep you signed in and to keep the service secure. Where product analytics are enabled, we may use additional cookies; we will ask for your consent where the law requires it.
9. Children
Formever is not intended for children, and you should not use it to collect personal data from children without an appropriate lawful basis and any required parental consent.
10. Changes to this policy
We may update this policy from time to time. When we make material changes, we will update the date at the top of this page.