Privacy Policy — FormPilot

Effective date: November 4, 2025

FormPilot (“we”, “our”, or “the app”) provides a form-building and submission-management tool for online stores. This Privacy Policy explains what information we collect, how we use it, how it is stored, and the choices available to merchants and end users regarding that information.

1. Information we collect

Merchant-provided information

When a merchant installs and configures FormPilot, we collect account-related information necessary to provide and manage the app, such as:

• Merchant contact information (name, email address)
• Account and configuration data you provide during setup (e.g., form settings, branding selections)
• Billing or purchase information when applicable (note: payments are processed by the platform or third-party payment provider)

Form submission data (collected from store visitors)

FormPilot stores the data submitted through the forms you create. The specific data collected depends on the fields you add to each form. Examples include:

• Personal data: name, email address, phone number (where provided)
• Message or feedback text
• Files uploaded by the user (attachments) if the form includes a file upload field
• Other custom fields added by the merchant

Important: Form submissions are stored in the app dashboard. FormPilot does not automatically email submission content to third-party recipients unless the merchant explicitly exports or forwards the data from the dashboard.

Automatically collected information

When visitors view or submit forms, we may collect technical data to operate and improve the app, such as:

• IP address
• Browser type and version
• Date/time of interaction
• Basic device and connectivity data (user agent)

2. How we use information

• To provide, operate, and maintain FormPilot and its features.
• To store and present form submissions in the app dashboard for merchant review and management.
• To troubleshoot, analyze, and improve app performance and user experience.
• To respond to merchant support requests and provide customer service.
• To comply with legal obligations and protect rights and property.

3. Data sharing and third parties

We do not sell personal information. We may share data in the following limited circumstances:

• Service providers: We may use trusted third-party providers to perform services on our behalf (for example, hosting, backups, analytics). These providers only have access to the information necessary to perform their services and are contractually prohibited from using it for other purposes.
• Legal requests: We may disclose data if required to do so by law or in response to valid legal process.
• Business transfers: If FormPilot is involved in a merger, acquisition, or sale of assets, user data may be transferred as part of that transaction. We will require any successor to have privacy protections consistent with this policy.

4. Where data is stored and retention

FormPilot stores form submissions and account data on secure servers. We retain merchant account data and form submissions for as long as the merchant’s account is active or as needed to provide services. If a merchant requests deletion of their account or uninstalls the app, merchants may request deletion of stored data by contacting support (see Contact section). We may retain aggregate or anonymized data for analytics.

5. Merchant and end-user controls

Merchants control the content and configuration of forms (including what fields to collect). Merchants are responsible for ensuring that they have the necessary rights and consents to collect personal data from their customers.

• Access and export: Merchants can view and export form submissions from the app dashboard.
• Deletion: Merchants can request deletion of their account data and stored submissions by contacting support at the email below. We will take reasonable steps to remove the data from our active systems and backups in accordance with our retention practices.

6. Security

We use reasonable administrative, technical, and physical safeguards to protect data from unauthorized access, disclosure, or destruction. Measures include access controls, encryption in transit, and regular security reviews. However, no method of transmission or storage is 100% secure; absolute security cannot be guaranteed.

7. Cookies and tracking

FormPilot may use cookies or similar technologies for functionality and performance (for example, to maintain state while a merchant is using the app). If we use analytics services, those services may place cookies or collect usage data. Merchants should refer to their store and platform policies for additional details about site-wide tracking.

8. Children’s privacy

FormPilot is not intended for use by children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

9. International data transfers

Data collected by FormPilot may be stored and processed in countries outside your own. When personal information is transferred internationally, we will protect it in accordance with this Privacy Policy and applicable law.

10. Your legal rights

Depending on where you live, you may have rights regarding your personal data, including:

• The right to access personal data we hold about you
• The right to correct inaccurate data
• The right to request deletion or restriction of processing
• The right to object to processing and to request portability

To exercise these rights, merchants or data subjects should contact us using the details below. We will respond in accordance with applicable laws.

11. Changes to this privacy policy

We may update this Privacy Policy from time to time. When we do, we will post the revised policy here with an updated effective date. Continued use of FormPilot after changes constitutes acceptance of the revised policy.

12. Contact

If you have questions, wish to access, correct, or delete data, or want to raise a privacy concern, contact us:

• Email: ayan.bluehorse@gmail.com
• Mailing address: Available on request — contact the email above.