Privacy Policy

Formwrapper lets you build forms whose responses land directly in a Google Sheet that you own. This policy explains what we store, what we do with data we receive from Google, and how to get it back or remove it.

Who we are

Formwrapper is an independent product, currently in beta. For any privacy question, or to request deletion of your data, write to hello@formwrapper.com.

What we store

When you sign in with Google, we store:

• Account identity — your name, email address and profile picture URL, as provided by Google.
• Google OAuth tokens — an access token and refresh token, so we can write to the Sheet we created for you without asking you to sign in on every visit.
• Your forms — the fields, labels, theme and settings that make up each form you build, plus the ID of the Google Sheet it is connected to.

We do not store form responses. When someone submits one of your forms, the response is written straight to your Google Sheet. It is not retained in a Formwrapper database — there is no responses table for us to keep, sell or lose.

Google user data and Limited Use

Formwrapper requests the following Google OAuth scopes, and only these:

• openid, email, profile — to identify your account and show you who you are signed in as.
• https://www.googleapis.com/auth/drive.file — per-file access to only the files Formwrapper itself creates. This scope cannot read, modify or even see any other file in your Drive. We use it to create your response Sheet and append rows to it.

Formwrapper's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• Google user data is used only to provide and improve the features described above.
• Google user data is never sold and never transferred to third parties except as needed to run the service, for security purposes, or where required by law.
• Google user data is never used for advertising of any kind.
• Google user data is never used to train generalised artificial intelligence or machine learning models.
• No human reads your Google user data, except with your explicit permission for a specific support request, for security purposes, or where required by law.

Your OAuth tokens are encrypted at rest using AES-256-GCM before being written to our database. Ciphertext is authenticated, so a tampered token fails to decrypt rather than being used.

Analytics

On our public marketing pages we use Google Analytics 4 to count visits and understand which pages people read. This is aggregate usage data. It is loaded in production only, and it is not connected to the contents of your forms or your Sheet.

Notification and reply emails

Every submission to your form sends you an owner-notification email containing the response content, so you can act on it without checking your Sheet. If you turn on auto-reply for a form, the respondent's email address is also processed — by Resend, our email provider — solely to send them the reply you configured.

Billing (Pro plan)

If you upgrade to Pro, subscription billing is handled by Dodo Payments as merchant of record. Dodo collects your card details, billing address and email directly — Formwrapper never receives or stores your card number. We store only your Dodo customer and subscription identifiers, so we know which plan you are on.

Who else processes your data

• Google — sign-in, Drive and Sheets.
• Resend — sends owner-notification and, if enabled, auto-reply emails.
• Dodo Payments — merchant of record for Pro subscriptions; handles payment, tax and invoicing.
• Our hosting provider — runs the Formwrapper application server.
• Our database provider — stores accounts, encrypted tokens and form definitions.

Your rights and choices

• Revoke access at any time from your Google account permissions page. Formwrapper immediately loses the ability to write to your Sheet.
• Disconnecting keeps your data. Removing Formwrapper deletes our stored tokens. Your Sheets, and every response in them, stay in your Drive — they were always yours.
• Request deletion of your account and form definitions by writing to hello@formwrapper.com.

Retention

Account details, encrypted tokens and form definitions are kept until you delete your account or ask us to remove them. Because responses live in your Sheet, their retention is entirely up to you.

Changes to this policy

If this policy changes materially, we will update the date at the top of this page. Continuing to use Formwrapper after a change means you accept the updated policy.