Privacy Policy

Last updated: May 29, 2025

At Formnex, we value your privacy and are committed to protecting the personal information you share with us. This Privacy Policy outlines how we collect, use, store, and disclose your data when you use our platform, including our website, form submission services, and developer tools.

By using our services, you agree to the terms of this Privacy Policy. If you do not agree, please refrain from using the platform.

---

1. Information We Collect

We collect the following categories of information to provide and improve our services:

1.1 Account Information

When you register an account on Formnex (including via GitHub), we may collect:

• Your full name
• Email address
• GitHub username and ID (if signing in via OAuth)
• Profile image (if available from GitHub)
• Authentication token (temporarily stored for session validation)
• IP address and user agent

1.2 Form Submission Data

We store data submitted through your custom form endpoints. This data may include:

• Form field values (as defined by you)
• Timestamps of submission
• Originating IP address
• Metadata such as headers or UTM parameters

Note: You are responsible for the content of the forms you configure and must ensure it complies with privacy regulations applicable to your users.

1.3 Webhook Logs

If you use our webhook delivery system, we collect:

• Webhook destination URL (private)
• Delivery status and timestamps
• Response codes and errors (for retry or failure analysis)

1.4 Usage Data

To maintain platform stability and improve performance, we may collect:

• Pages visited within the dashboard
• Time spent on platform features
• Device/browser type
• Referral sources (e.g., from GitHub or other links)

This data is anonymized and used for analytics purposes only.

---

2. How We Use Your Information

We use the data we collect to:

• Authenticate and authorize user sessions
• Route and store form submissions securely
• Provide access to submission logs and webhook history
• Notify you of platform updates, service changes, or legal notices
• Monitor platform performance and security
• Prevent abuse, fraud, or misuse of endpoints

We never sell your data or form submissions to third parties.

---

3. GitHub Authentication

3.1 OAuth Integration

Formnex allows you to sign in using your GitHub account via OAuth. When you choose this method:

• We redirect you to GitHub’s official OAuth authorization endpoint.
• You grant permission to read your basic GitHub profile and email address.
• GitHub returns an access token and your public profile data.

3.2 What We Store

From GitHub, we store:

• Your GitHub user ID
• Email address
• Username
• Profile image URL (if available)

We do not store your GitHub password or have access to any of your private repositories or GitHub data unless explicitly authorized by you in the future.

3.3 Why We Use GitHub OAuth

GitHub OAuth is used for:

• Streamlined developer login and registration
• Verifying developer identity for usage rate limiting
• Displaying your name or avatar in the dashboard UI (optional)
• Providing a seamless authentication flow without requiring password storage

We do not use your GitHub credentials for marketing or analytics.

3.4 Revoking Access

If you wish to revoke Formnex’s access to your GitHub account:

1. Go to your GitHub account settings
2. Navigate to Applications > Authorized OAuth Apps
3. Find Formnex and click “Revoke Access”

Once revoked, your Formnex session will be deactivated, and you will need to reauthenticate to use the dashboard.

---

4. Data Storage and Retention

We use modern cloud infrastructure to securely store your data. All traffic is encrypted in transit via HTTPS and TLS protocols.

Retention Periods

• Form submissions are retained based on your account level (e.g., 30–90 days).
• Webhook logs are retained for a limited duration to support debugging and auditing.
• Account metadata is retained for as long as your account is active, and may be archived upon deletion.

You can request deletion of your data or account at any time.

---

5. Data Sharing and Disclosure

We do not sell or share your data with third parties for marketing purposes. We may share information only in the following cases:

• Legal Compliance: If required by law, subpoena, or government request.
• Service Providers: Third-party services that assist in hosting, analytics, and email delivery (e.g., Vercel, Clerk, or Resend).
• Security Investigations: If necessary to investigate abuse, fraud, or threats.

All third-party providers are contractually obligated to protect your data.

---

6. Your Rights

Depending on your jurisdiction (e.g., GDPR, CCPA), you may have the following rights:

• Right to access your personal data
• Right to request correction or deletion
• Right to withdraw consent
• Right to data portability
• Right to object to certain processing activities

To exercise your rights, contact us at: amankureshi.contact@gmail.com

---

7. Cookies and Tracking

We use minimal cookies and localStorage for session management and to maintain login state. These may include:

• A session token cookie (secure, HTTP-only)
• Local storage entries for UI preferences
• Analytics scripts (only for internal use)

We do not use third-party advertising trackers or fingerprinting.

---

8. Third-Party Links

Our site or documentation may include links to third-party services (e.g., GitHub, NPM). We are not responsible for the privacy practices of those platforms. We encourage you to review their privacy policies before interacting with them.

---

9. Children’s Privacy

Formnex is not intended for individuals under the age of 13 (or the applicable age in your region). We do not knowingly collect personal data from children. If you believe a child has provided personal data, please contact us to request deletion.

---

10. Data Security

We follow industry best practices to ensure your data is secure:

• End-to-end encryption of data in transit
• Encrypted storage of sensitive tokens or secrets
• Access controls and monitoring of infrastructure
• Regular code audits and vulnerability scanning

Despite our best efforts, no system is 100% secure. Please use strong passwords and protect your GitHub account to enhance your security posture.

---

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do:

• The “Last updated” date will be revised
• Significant changes will be announced via email or in your dashboard

Continued use of the platform after any update constitutes acceptance of the new terms.

---

12. Contact Us

For questions, requests, or concerns regarding this Privacy Policy or your data, contact us at:

TechAxis Solutions
Email: amankureshi.contact@gmail.com
Website: https://codewithaman.vercel.app

---

By using Formnex, you acknowledge that you have read, understood, and agree to this Privacy Policy.