Privacy Policy

1. Information We Collect

We collect information in the following ways when you use our service:

• Account Information: When you register for FormWix via email or Google OAuth, we collect your name, email address, and authentication identifiers provided by the authentication provider.
• Wix Form Submissions: FormWix functions as a secure integration pipe and form backend for Wix and Wix Studio. When visitors submit data through forms connected to FormWix, that data is processed in real time and transmitted directly to your configured destinations (such as Google Sheets, Klaviyo, Notion, HubSpot, Slack, or Webhooks).
• Usage & Performance Metrics: We collect aggregated server logs, response latencies, and submission counts to monitor SLA uptime, prevent abuse, and enforce plan quotas.

2. Zero-Retention Data Architecture

By default, FormWix is architected with a Zero-Retention Policy for end-user form payloads. Once a submission payload has been successfully dispatched to your connected destinations, sensitive personal field contents are immediately purged from our memory caches. We do not sell, rent, or monetize your form submission data.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the FormWix service and dashboard.
• Process transactions, billing, and subscription management via Stripe.
• Authenticate your account session securely using Supabase Auth.
• Deliver form submission alerts and notifications to your configured recipient email.
• Comply with applicable legal obligations and enforce our Terms of Service.

4. Third-Party Integrations & Google User Data

When you authenticate using Google OAuth or connect your Google account (for example, to stream submissions into Google Sheets):

• FormWix only requests the minimum necessary scopes required to authenticate your profile (email and profile information) or append rows to your designated spreadsheet.
• FormWix complies strictly with the Google API Services User Data Policy, including the Limited Use requirements.
• We do not transfer or disclose Google user data to third parties for advertising or unauthorized analytical purposes.

5. Data Security

We implement industry-standard encryption protocols (TLS 1.3 in transit and AES-256 for stored credentials and API secrets). Access to production environments is strictly limited to authorized personnel with multi-factor authentication.

6. Contact Information

If you have any questions or concerns regarding this Privacy Policy or your data rights, please contact our support team at: hello@efe.com.vn.