1. Introduction
MarkForm ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application and services (collectively, the "Service").
2. Information We Collect
Account Information
When you create an account, we collect your email address and, optionally, your display name and profile picture. We use Supabase Auth to manage authentication securely.
Form Data
We store the forms you create, including their markdown content, settings, and metadata. If you connect a GitHub repository, we store the connection details needed to sync your forms.
Response Data
When respondents submit answers to your forms, we store those responses. Response data is associated with your form and is accessible only to you (the form owner) and any collaborators you explicitly invite.
Usage Data
We automatically collect certain information about how you interact with the Service, including pages visited, features used, and general analytics data. We use Vercel Analytics for this purpose.
3. How We Use Your Information
- To provide, operate, and maintain the Service
- To manage your account and provide customer support
- To process form submissions and deliver responses to form owners
- To enable collaboration features such as real-time editing
- To sync your forms with GitHub when you enable Git integration
- To generate statistical analyses on your form response data
- To send you service-related communications (e.g., security alerts, account updates)
- To improve and optimize the Service
4. Data Storage and Security
Your data is stored securely using Supabase (built on PostgreSQL) with row-level security policies. All data is encrypted in transit via TLS. We implement industry-standard security measures to protect your information from unauthorized access, alteration, or destruction.
5. Data Sharing
We do not sell your personal information. We may share your information only in the following circumstances:
- With collaborators: If you invite collaborators to a form, they can access that form's content and responses.
- With service providers: We use third-party services (Supabase, Vercel, Stripe) to operate the Service. These providers access your data only to perform services on our behalf.
- For legal compliance: We may disclose information if required by law or to protect our rights and safety.
6. Your Rights
You have the right to:
- Access, update, or delete your account information at any time from your settings page
- Export your form data and responses
- Delete your forms and all associated response data
- Request a complete deletion of your account and all associated data by contacting us
7. Cookies
We use essential cookies to maintain your authentication session. We do not use third-party tracking cookies or advertising cookies.
8. Children's Privacy
The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting a notice on the Service or sending you an email. Your continued use of the Service after changes take effect constitutes your acceptance of the revised policy.
10. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at our contact page.