Privacy Policy

1. Introduction

Bionic Forms ("we", "us", or "our") operates bionicforms.com (the "Service"). This Privacy Policy explains how we collect, use, and protect information when you use our Service. By using Bionic Forms, you agree to the collection and use of information as described here.

2. Information We Collect

Account information. When you register, we collect your name, email address, and a hashed password. If you sign in with Google or Facebook, we receive your name, email address, and a unique provider identifier — we never receive or store your social login password.

Form data. We store the form definitions you create and the responses submitted to your forms so you can view, analyze, and export them.

Usage data. We collect standard server logs (IP address, browser type, pages visited, timestamps) to operate and improve the Service.

Cookies & sessions. We use a server-side session cookie to keep you logged in. We do not use third-party advertising cookies.

3. How We Use Your Information

• Provide, operate, and maintain the Service
• Authenticate you and manage your account
• Send transactional emails (email verification, password reset)
• Generate AI-powered analysis of your form responses
• Process payments via Stripe (we never see your card number)
• Respond to support requests
• Detect and prevent fraud or abuse

4. Information Sharing

We do not sell or rent your personal data. We share information only with trusted service providers who help us operate the Service:

• Stripe — payment processing
• Google — OAuth sign-in and optional Google Sheets integration
• Meta (Facebook) — OAuth sign-in
• Anthropic (Claude API) — AI response analysis (form response text is sent to generate summaries)
• Resend / SMTP provider — transactional email delivery

We may disclose information if required by law or to protect the rights, property, or safety of our users or the public.

5. Data Retention

We retain your account data and form responses for as long as your account is active. You may delete your account and associated data at any time by contacting us. We will remove your data within 30 days of a verified deletion request.

6. Security

We use industry-standard measures to protect your data, including TLS encryption in transit, bcrypt-hashed passwords, and isolated per-tenant data access. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your location, you may have rights to access, correct, or delete your personal data. To exercise these rights, contact us at privacy@bionicforms.com.

If you signed in with Google or Facebook, you can revoke our access at any time through your Google or Facebook account settings.

8. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy, please contact us at privacy@bionicforms.com.