Privacy Policy

1. Who we are

Brieform (“we”, “us”, “our”) operates the Brieform service at brieform.app. We are an AI-powered form builder. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

If you have questions, contact us at: dany@brieform.app

2. Information we collect

Account information

When you create an account, we collect your name, email address, and (if using OAuth) your Google profile picture. We do not collect or store passwords in plain text — authentication is handled via secure hashed credentials or OAuth tokens.

Forms and responses

We store the forms you create (fields, themes, settings) and the responses submitted by your form respondents. You own this data entirely.

Usage data

We collect basic usage data such as pages visited, features used, and error logs to improve the service. While you are signed out this data is not tied to a profile. Once you sign in, it is linked to your account so we can tell whether a change actually helped, and so support can look at what happened on your account. See section 4 for who processes it.

For published forms, we record page views and traffic referrers (hostname only). Platform operators may view aggregate analytics across published forms—submission volumes, traffic sources, and trends. These dashboards do not display individual response contents.

Account sign-up

When you create an account, we collect your email address to provide access to the service and send relevant product updates. You can unsubscribe at any time via the link in any email.

3. How we use your information

• To provide, operate, and improve the Brieform service
• To send transactional emails (password reset, email verification)
• To send early access and product update emails (opt-out available)
• To respond to support inquiries
• To detect and prevent fraud or abuse
• To comply with legal obligations

We do not sell your data. We do not use your form responses to train AI models. We do not share your personal information with third parties except as described in this policy.

4. Data sharing and third parties

We share data with a limited set of trusted service providers solely to operate the service:

• Database hosting — PostgreSQL hosted on a secure cloud provider (EU or US region)
• Email delivery — Resend, for transactional emails only
• AI processing — Your prompts to generate forms are processed via an AI gateway using providers whose terms prohibit training on API inputs.
• Authentication — Google OAuth (only if you choose to sign in with Google)
• Product analytics — PostHog, on its EU infrastructure. It records the pages you view and a small number of declared events (signing up, clicking a call to action, reaching checkout). Requests are proxied through brieform.app rather than sent to PostHog directly. While you are signed out, the data is not linked to a profile; once you sign in we send PostHog your user ID and email address so the events of one account can be read together. It is not loaded on published form pages, so people answering your forms are not measured.
• Error reporting — Sentry, for server errors only. A report carries the exception, the code path that threw and the deployed version. It is configured not to attach cookies, request headers or IP addresses, and no error-reporting code runs in your browser or on published form pages.

We select providers with appropriate data handling commitments and limit data sharing to what is strictly necessary to operate the service.

5. Cookies

We use a small set of cookies and equivalent browser storage:

• Session cookie — keeps you logged in during your session
• CSRF token — protects against cross-site request forgery
• Analytics identifier — a cookie and a local storage entry set by PostHog, used to recognise the same browser across visits so a sequence of pages counts as one session rather than several. This one is not required to operate the service.

We do not use advertising cookies or third-party advertising pixels, and we do not sell or share this data with advertisers. Our analytics is first-party in the sense that it is served from our own domain, but it is a measurement tool and it does identify you once you are signed in. You can block it with any standard content blocker without affecting how the product works.

6. Data retention

We retain your account data for as long as your account is active. If you delete your account, all associated forms, responses, and personal data are permanently deleted within 30 days.

Form responses submitted by your respondents are retained until you delete them or close your account. Respondents wishing to exercise their GDPR rights (access, erasure, etc.) over their submitted data may contact either the form owner (the data controller) or us directly at dany@brieform.app.

7. Your rights (GDPR / CCPA)

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of your data
• Rectification — correct inaccurate data
• Erasure — request deletion of your account and data
• Portability — export your data in a machine-readable format
• Objection / Restriction — object to or restrict certain processing
• Opt-out of sale — we don't sell data, but you may request confirmation

To exercise any of these rights, email us at dany@brieform.app. We will respond within 30 days.

8. Security

All data is encrypted in transit (TLS) and at rest. We follow security best practices including hashed passwords, signed session tokens, and principle of least privilege for internal access. See our Security page for full details.

9. Children

Brieform is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

10. Changes to this policy

We may update this policy from time to time. We will notify you via email or an in-app notice at least 14 days before material changes take effect. The “Last updated” date at the top of this page reflects the most recent revision.

11. Contact

For privacy inquiries: dany@brieform.app