Privacy Policy
1. Who we are
CloviForms is operated by CloviTek LLC. "We", "us", and "our" refer to CloviTek LLC. Questions: [email protected].
2. Data we collect
- Account data: email address, name, and hashed password on registration.
- Form data: forms you create, including titles, fields, and settings.
- Submission data: responses your form respondents submit — you control this data.
- Usage data: browser type, IP address, pages visited, feature usage (for service improvement).
- Payment data: transaction records only; card details are processed by AppSumo or our payment processor — we do not store raw card numbers.
3. How we use your data
- To provide and improve the Service (create forms, store submissions, display dashboards).
- To communicate service updates, billing, and support responses.
- To enforce our Terms and prevent fraud or abuse.
- To comply with legal obligations.
4. Form submission data — your responsibility
When you build forms and collect respondent data, you are the data controller for that data. You must obtain appropriate consent, provide a privacy notice to your respondents, and comply with applicable laws (GDPR, CCPA, etc.). We process respondent data only on your behalf as a data processor.
5. Data sharing
We do not sell your data. We share data with service providers (hosting, analytics, email delivery) only as necessary to operate the Service, under data processing agreements. We disclose data when required by law.
6. Data retention
Account data is retained while your account is active and for 90 days after deletion. Form submission data is retained per your account settings; you can delete submissions at any time.
7. Your rights
Subject to applicable law, you have the right to access, correct, export, or delete your data. Email [email protected].
8. Cookies
We use essential cookies for authentication and session management. See our Cookie Policy.
9. Security
We use encryption in transit (TLS), hashed passwords (bcrypt), and access controls. No system is 100% secure — notify us promptly of any suspected breach.
10. Children's privacy
The Service is not directed to children under 13. We do not knowingly collect data from children.
11. Changes
We will post material changes here with an updated effective date.