Last updated: October 4, 2025
Formly – Privacy Policy
This Privacy Policy explains how Formly ("Formly", "we", "us", "our") processes personal data in connection with the Formly platform and services ("Service"). This Privacy Policy applies to users of the Formly platform and visitors to our website.
Who we are
Formly is a software platform that enables users to create digital forms, collect responses, and accept payments using third-party payment providers. For the purposes of data protection laws, including Regulation (EU) 2016/679 (GDPR): Formly acts as a Data Controller with respect to personal data of its own users (e.g. account holders). Formly acts as a Data Processor with respect to personal data collected by users through forms created using the Service.
Personal data we collect (Platform users)
When you create and use a Formly account, we may process the following categories of personal data: name and email address, company name and business information, login credentials (encrypted), billing and subscription information, IP address, device and usage data, communications with our support team. We process this data to provide and maintain the Service, manage accounts and subscriptions, communicate with users, and comply with legal obligations.
Personal data collected through forms
When a person fills out a form created using Formly (Respondent): the Formly user who created the form is the Data Controller, and Formly processes the data solely on behalf of the user as a Data Processor. The type of data collected depends entirely on the form configuration and may include contact details, messages, uploaded files, or payment-related information. Respondents should review the privacy policy of the form owner for information about how their data is used.
Legal bases for processing
We process personal data based on one or more of the following legal bases: performance of a contract, compliance with legal obligations, legitimate interests (e.g. improving the Service, security), and consent where required. Formly users are responsible for identifying and communicating the appropriate legal basis for processing Respondent data.
Payments and Stripe
Payments made through forms are processed by Stripe, Inc. and its affiliates. Formly does not store or process payment card details. Stripe acts as an independent Data Controller for payment data processed through Stripe Connect. Stripe's processing of personal data is governed by its own privacy policy.
Data sharing and subprocessors
We may share personal data with trusted third-party service providers (subprocessors) who help us operate the Service, including cloud hosting providers, analytics and monitoring tools, email and customer support services, and payment providers (e.g. Stripe). All subprocessors are bound by data protection obligations consistent with GDPR. A current list of subprocessors may be made available upon request.
International data transfers
Personal data may be transferred outside the European Economic Area (EEA). Where required, such transfers are protected by appropriate safeguards, including Standard Contractual Clauses approved by the European Commission.
Data retention
We retain personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by law. Formly users control the retention of data collected through their forms and may delete such data at any time.
Data security
We implement appropriate technical and organizational measures to protect personal data, including encryption, access controls, regular security monitoring, and data minimization practices. No system is 100% secure, but we continuously work to protect your information.
Your rights
Under GDPR, individuals have the right to access their personal data, rectify inaccurate data, request erasure (right to be forgotten), restrict or object to processing, data portability, and lodge a complaint with a supervisory authority. Requests related to data submitted via a form should be directed to the form owner. Requests related to Formly accounts may be sent to us directly.
Cookies and tracking
Formly uses cookies and similar technologies to ensure proper functioning of the Service and to analyze usage.
Children's data
Formly is intended for use by adults only. Users must be at least 18 years old to create an account. Formly does not knowingly collect personal data from children.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time. We will notify users of material changes via email or in-app notice. Continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy.
Contact information
If you have any questions about this Privacy Policy or our data protection practices, please contact us at support@payformly.com.