Privacy Policy

Introduction

FormAssembly Inc. ("FormAssembly," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information in connection with FormAssembly (formassembly.ai).

By using FormAssembly, you agree to the practices described in this policy.

Definitions

Users are individuals or organizations who create an account on FormAssembly to build forms, design workflows, and collect data.

Respondents are individuals who fill out forms published by Users. Respondents may or may not have a FormAssembly account.

Information We Collect

Information Users provide

When you create an account or use the platform, we may collect:

• Name and email address
• Organization name
• Payment information (processed securely by Stripe; FormAssembly does not store card numbers)
• Account preferences and settings
• Content you create: forms, workflows, and related configuration

Information Respondents provide

Respondents submit data through forms created by Users. The nature of that data depends entirely on what the User has chosen to collect. FormAssembly processes this data on behalf of the User and has no direct relationship with Respondents.

Important: FormAssembly is not able to monitor or control the information requested by Users in their forms. Users are responsible for ensuring their forms comply with applicable laws.

Information collected automatically

When you use FormAssembly, we automatically collect:

• IP address, browser type, operating system
• Pages visited, referring URLs, date and time of access
• Clickstream and usage data

We use Pendo to analyze how Users interact with the application. Pendo receives only pseudonymized usage data — no personally identifiable information and no Respondent data is sent to Pendo.

We may use advertising measurement trackers to assess the effectiveness of marketing campaigns that drive traffic to FormAssembly. These trackers do not share identifiable user data with advertisers and are not used within the form-filling experience.

How We Use Information

We use the information we collect to:

• Provide, operate, and improve FormAssembly
• Process payments and manage your account
• Send transactional emails (account notifications, form submission delivery)
• Provide customer support
• Analyze usage patterns to improve the product
• Comply with legal obligations

Fai — AI Assistant

FormAssembly includes Fai, an AI-powered assistant that is a core part of the platform. Fai is powered by third-party AI providers (currently Anthropic and OpenAI).

FormAssembly has zero-retention agreements with both Anthropic and OpenAI. This means:

• Data you send to Fai — including prompts and responses — is not stored by these providers beyond the duration of the request
• Your data is never used to train or fine-tune AI models by these providers or by FormAssembly
• Third-party AI providers are contractually bound to strict data privacy and confidentiality standards

Data Sharing and Disclosure

We do not sell your personal information.

We do not share personal information with third parties except in the following circumstances:

• Service providers: We share data with vendors who help us operate the platform (e.g., Stripe for payments, Pendo for analytics, our email delivery provider). These parties are contractually required to protect your data and may only use it to provide services on our behalf.
• Integrations you authorize: FormAssembly supports integrations with third-party services. Any data sharing with these services requires your explicit authorization and is governed by those services' own privacy policies.
• Legal requirements: We may disclose data when required by law, subpoena, or other legal process, or when we believe disclosure is necessary to protect rights, prevent fraud, or ensure safety.
• Business transfers: If FormAssembly is acquired or merges with another entity, your information may be transferred as part of that transaction. We will notify you via email and a notice on this site before that occurs.
• With your consent: We may share information for any other purpose with your prior consent.

When FormAssembly processes Respondent data on behalf of a User, the User is the data controller. Respondents seeking access to, correction of, or deletion of their data should contact the User directly. FormAssembly will respond to removal requests within 30 days.

Cookies and Tracking Technologies

We use cookies to authenticate sessions and remember your preferences. You can control cookie settings through your browser, though disabling cookies may affect platform functionality.

Data Security

FormAssembly uses SSL/TLS encryption to protect data in transit. Sensitive data at rest may be encrypted depending on account configuration.

No method of transmission over the internet is 100% secure. While we take reasonable measures to protect your information, we cannot guarantee absolute security.

Data Retention

We retain your account information and form data for as long as your account is active or as needed to provide our services. You may request deletion of your account and associated data at any time by contacting us. We may retain certain information as required by law or for legitimate business purposes.

Your Rights and Choices

• Access and correction: You may access and update your account information at any time through your account settings.
• Marketing emails: You may unsubscribe from promotional emails at any time using the link in the email or through your account settings. We will continue to send transactional and service-related communications.
• Account deletion: Contact us to request deletion of your account and data.

EU-U.S. Data Privacy Framework

FormAssembly Inc. complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework as set forth by the U.S. Department of Commerce. FormAssembly is subject to the investigatory and enforcement powers of the Federal Trade Commission.

In cases of onward transfer to third parties, FormAssembly remains liable under the DPF Principles.

For inquiries or complaints related to the DPF, please contact us at the address below. If your complaint is not resolved through our internal process, you may pursue binding arbitration as described on the official DPF website.

Third-Party Links

FormAssembly may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a notice on this site before the changes take effect.

Contact Us

For questions, concerns, or requests related to this Privacy Policy:

Email: privacy@formassembly.ai
Phone: (844) 293-2367
Mail:
FormAssembly Inc.
885 S College Mall Rd, #399
Bloomington, IN 47401