Legal
Privacy Policy
Last updated: March 27, 2026
1. Controller
FormAI is operated by Ahmed Ashraf Yassen Aly. If you use this application, your data is processed by the operator for the purpose of running the service, authenticating users, generating forms, collecting submissions, and improving reliability and security.
2. Data we collect
Depending on how you use FormAI, we may collect:
- account information provided through Clerk, such as name, email address, avatar, and workspace membership
- form metadata, prompts, field structures, and published form snapshots
- submission contents entered into published forms
- technical usage information such as page views, timestamps, browser sessions, and service logs
3. How we use data
- to provide authentication, workspace access, and form management features
- to generate AI-assisted form drafts through Groq
- to store and deliver published forms and submissions
- to monitor abuse, apply fair-use limits, and protect service integrity
- to debug issues and improve product quality
4. Third-party processors
FormAI currently relies on third-party services including Clerk for authentication, Convex for backend/data infrastructure, and Groq for AI generation. These providers may process the minimum data required to perform their role in the service.
5. Retention
We keep account data, forms, and submissions for as long as needed to operate the service, comply with legal obligations, resolve disputes, and maintain security. You can request deletion of your account-related data as described on the Data & Deletion page.
6. Security
Reasonable technical and organizational measures are used to protect data, but no system can be guaranteed perfectly secure. You should avoid collecting highly sensitive personal data through FormAI unless you have reviewed the risks and your own legal obligations.
7. Contact
If you need to make a privacy or deletion request, contact the operator through the project contact details you publish with the deployed service.