Privacy Policy
This policy explains how Forms7 processes personal data, why we process it, how long we keep it, how cookies work, and which rights you have under the GDPR.
Controller
The controller of your personal data is Web7master s.r.o., with its registered office at Mydlarska 189/3, Liberec 10, 460 10, Czech Republic, company ID 02845539, registered in the Commercial Register maintained by the Regional Court in Usti nad Labem, section C, file 34024.
For questions, objections, or requests related to personal data, contact us at info@forms7.com or by post at our registered office.
Personal Data We Process
We process personal data that is necessary to provide Forms7, manage customer accounts, communicate with you, handle billing, and meet legal obligations. This may include company or billing addresses, project addresses, contact details, phone numbers, email addresses, bank or payment information, and data created during communication with us.
We also process data that you provide when using Forms7, including form configuration, submission data, integration settings, prompts, instructions, generated outputs, and other information required to deliver the service.
Purposes and Legal Bases
We process personal data to perform our contract with you, provide and maintain Forms7, support your account, process payments, secure the service, comply with accounting and tax obligations, and protect our legal claims.
We use automated and AI-assisted systems to help generate form schemas, field suggestions, conditional logic, summaries, insights, and similar product outputs requested by users. These systems process the content provided to them only as needed to provide, secure, maintain, and improve the service.
We may send product news related to Forms7 based on our legitimate interest. You can unsubscribe from these messages at any time. If we want to use your data for unrelated marketing or share it with partners for their own purposes, we will ask for your consent first.
AI-Assisted Features
Forms7 includes AI-assisted features. When you use those features, the information you submit may be processed automatically to produce suggestions, drafts, classifications, summaries, or analytics for your account.
AI output may be inaccurate, incomplete, or unsuitable for a particular legal, business, or compliance purpose. You are responsible for reviewing AI output before publishing, sending, relying on, or using it with respondents or third parties.
Forms7 does not use AI features to make decisions about users that are based solely on automated processing and that produce legal or similarly significant effects.
Recipients and Transfers
We do not sell personal data. We may share personal data with service providers that help us operate Forms7, such as hosting, authentication, payment, analytics, email, support, AI processing, and infrastructure providers, only to the extent needed for those services.
Where personal data is transferred outside the European Economic Area, we use appropriate safeguards required by applicable data protection law.
Retention
We keep personal data for as long as needed for the purpose for which it was processed, including for the duration of the contract, and then for periods required by law or necessary to protect our rights, such as accounting, tax, complaint, and limitation periods.
Security
We protect personal data through organizational and technical security measures. Access is limited according to role and need, and our team members are bound by confidentiality. We regularly review security risks and adopt corrective measures where needed.
Cookies
Forms7 uses essential cookies to keep the website and product working. We use analytics cookies only after consent, to understand how the website is used and how we can improve it. You can manage cookie preferences in the consent banner or in your browser settings.
Your Rights
Under the GDPR, you may have the right to access your personal data, correct inaccurate data, request erasure, restrict processing, receive data portability, object to processing based on legitimate interest, and withdraw consent where processing is based on consent.
You also have the right to lodge a complaint with a supervisory authority. In the Czech Republic, this is the Office for Personal Data Protection at www.uoou.cz.