Privacy Policy
Last Updated: January 19, 2026
Welcome to Matcha Forms. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and safeguard your information when you use our form builder platform.
1. Information We Collect
1.1 Information You Provide
We collect information that you voluntarily provide when using our services:
- Account Information: Name, email address, password, and profile details
- Form Content: Forms you create, questions, responses, and related data
- Communication Data: Messages, feedback, and support requests
- Payment Information: Billing details for premium subscriptions (processed securely through third-party payment processors)
1.2 Automatically Collected Information
When you use our platform, we automatically collect:
- Usage Data: Pages visited, features used, time spent, and interaction patterns
- Device Information: IP address, browser type, operating system, device identifiers
- Cookies and Tracking: Session data, preferences, and analytics information
1.3 Form Response Data
When respondents complete your forms:
- Response content and submission timestamps
- Respondent IP addresses (if enabled by form creator)
- Device and browser information
2. How We Use Your Information
- Service Provision: To operate, maintain, and improve our form builder platform
- Account Management: To create and manage your account
- Communication: To send service updates, security alerts, and support messages
- Analytics: To understand usage patterns and improve user experience
- Security: To detect, prevent, and address technical issues and fraudulent activity
- Compliance: To comply with legal obligations and enforce our terms
- Marketing: To send promotional content (with your consent, where required)
3. Data Sharing and Disclosure
3.1 We Share Data With
Service Providers: Third-party vendors who help operate our platform (hosting, analytics, payment processing)
- Form Respondents: Form creators can access response data submitted to their forms
- Business Transfers: In case of merger, acquisition, or asset sale
- Legal Requirements: When required by law or to protect rights and safety
3.2 We Do Not
Sell your personal information to third parties
- Share your data for marketing purposes without consent
- Access form response data except for support, security, or legal purposes
4. Data Security
- Encryption in transit (SSL/TLS) and at rest
- Regular security audits and vulnerability assessments
- Access controls and authentication mechanisms
- Secure data backup and disaster recovery procedures
- However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
5. Data Retention
- Your account remains active
- Needed to provide services
- Required for legal, tax, or accounting purposes
- Necessary to resolve disputes and enforce agreements
- You can request deletion of your account and associated data at any time.
6. Your Rights and Choices
- Access: Request a copy of your personal data
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your data
- Portability: Receive your data in a portable format
- Opt-out: Unsubscribe from marketing communications
- Restriction: Request limitation of data processing
- Objection: Object to certain types of processing
7. Cookies and Tracking Technologies
- Maintain user sessions and preferences
- Analyze platform usage and performance
- Provide personalized experiences
- Improve security and fraud detection
- You can control cookie settings through your browser preferences. Note that disabling cookies may affect platform functionality.
8. Third-Party Services
Our platform may integrate with third-party services (e.g., Google Analytics, payment processors). These services have their own privacy policies, and we encourage you to review them.
Our platform may integrate with third-party services (e.g., Google Analytics, payment processors). These services have their own privacy policies, and we encourage you to review them.
9. Children's Privacy
Our services are not intended for users under 13 years of age (or 16 in the EU). We do not knowingly collect data from children. If you believe we have collected information from a child, please contact us immediately.
Our services are not intended for users under 13 years of age (or 16 in the EU). We do not knowingly collect data from children. If you believe we have collected information from a child, please contact us immediately.
10. International Data Transfers
Your data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this privacy policy.
Your data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this privacy policy.
11. Changes to This Policy
- Posting the updated policy on our website
- Sending email notifications to registered users
- Displaying a notice on our platform
- Your continued use of our services after changes take effect constitutes acceptance of the updated policy.
12. GDPR Compliance (EU Users)
- Right to withdraw consent at any time
- Right to lodge a complaint with a supervisory authority
- Right to know the legal basis for processing your data
- Right to data protection impact assessments
13. CCPA Rights (California Residents)
- Right to know what personal information is collected
- Right to know if personal information is sold or disclosed
- Right to opt-out of sale of personal information
- Right to non-discrimination for exercising CCPA rights
14. Contact Us
If you have questions, concerns, or requests regarding this privacy policy or our data practices, please contact us:
Email: privacy@matchaforms.com
Address: [Your Company Address]
Data Protection Officer: dpo@matchaforms.com