Privacy Policy

We collect only what we need to run the Service and keep it secure.

• Name, used to identify your account.
• Email address, used for login, notifications and important service announcements.
• Organization information, used to create your workspace.
• If you sign in with a third-party identity provider, basic profile fields (email, display name, profile photo URL and the provider's user identifier). We do not request access to your contacts, files or other services.
• Standard technical data from your browser or device. Used for security and aggregate analytics.

We use this information to:

• Create and maintain your account and organization.
• Authenticate you, including via supported third-party sign-in providers.
• Send transactional emails such as verification, security alerts and important service changes.
• Detect, prevent and respond to abuse, fraud and security incidents.
• Meet our legal obligations.

We do not sell your personal information and we do not use it for advertising.

We rely on a small set of trusted third-party providers. Each provider processes data only as needed to deliver its function and is bound by its own privacy practices.

We use a small set of cookies and similar storage to keep you signed in, remember preferences and protect the Service.

Your data is stored with data security on cloud infrastructure. We apply industry-standard safeguards.

No method of transmission or storage is 100% secure. We work continuously to protect your information using commercially reasonable measures.

We retain your account information while your account is active. If you delete your account, we will delete or anonymize your personal data within a reasonable timeframe, except where retention is required by law.

Forms and responses are deleted when the owning organization is deleted, unless you delete them sooner.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your personal data.
• Object to or restrict certain processing.
• Request a copy of your data in a portable format.

To exercise these rights, contact us. We will respond within the timeframes required by law.

The Service is not intended for children under 13 (or the higher age required by local law) and we do not knowingly collect their data. If you believe a child has provided personal data to us, contact us and we will delete it.

We may update this Privacy Policy. For material changes, we will provide additional notice such as a banner or email. Continued use after the effective date means you accept the updated policy.