Privacy Policy

This Privacy Policy explains how NIM Forms (“we”, “us”) collects, uses, and safeguards information when you use our form-building platform. By using NIM Forms you agree to the practices described here.

Information we collect

• Account data: your email address and, if provided, your name and avatar (including via Google sign-in).
• Content you create: forms, questions, settings, and configuration you build in the app.
• Form responses: data that respondents submit to forms you publish. As the form owner, you are the controller of this data.
• Technical data: a hashed IP address and user-agent on form submissions, used for spam prevention and rate limiting. We do not store raw IP addresses with submissions.

How we use information

• To provide and operate the service (creating forms, collecting and displaying responses, analytics).
• To send transactional emails such as sign-up confirmation, password resets, and new-response notifications.
• To protect the service against abuse, spam, and fraud.
• AI features (form generation, response summaries) send the relevant text to our AI provider to produce results. This content is not used to train third-party models.

Data sharing

We do not sell your personal data. We share data only with infrastructure providers that operate the service on our behalf: our database and authentication provider (Supabase), our email provider (Resend), our payment processor (Razorpay), our AI provider (Anthropic, which runs Claude), and our rate-limiting provider (Upstash). Each processes data solely to deliver their function.

Data retention

We retain your account and content until you delete them or close your account. You can delete individual form responses at any time, and deleting a form removes its responses. Deleting your NIM Forms data removes your forms, responses and files. The one exception is payment records (the plan, amount, currency, dates and Razorpay's order and payment ids — never card details), which we keep after you delete your data because tax and accounting record-keeping requires it.

Your rights

Depending on your jurisdiction (including under the GDPR and CCPA), you may have the right to access, correct, export, or delete your personal data. You can export your data and delete your account from Settings → Data & privacy in the dashboard, or contact us for assistance.

Security

Data is protected with row-level security so users can only access their own forms and responses. Connections are encrypted in transit (HTTPS), and we apply security headers, input sanitization, and rate limiting across the platform.

Children

NIM Forms is not directed to children under 13, and we do not knowingly collect their data.

Changes

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above.

Contact

Questions about this policy or your data? Contact the site operator at the email address configured for this deployment.

This document is a template provided for convenience and does not constitute legal advice. Consult a qualified professional to ensure compliance for your specific use case and jurisdiction.