1. Introduction
TinyForms is a product of Hyperchicken BV ("TinyForms", "we", "us", "our"). We respect your privacy and are committed to protecting your personal data. This policy explains what data we collect, how we use it, and the rights you have. For the purposes of the EU General Data Protection Regulation (GDPR), Hyperchicken BV is the data controller for personal data processed through TinyForms.
2. Data we collect
We may process the following categories of personal data:
- Account data (name, email address, password hash)
- Workspace data (workspace name, type, members)
- Form data (the fields you configure and the submissions you collect)
- Billing data (handled by our payments provider Paddle, see section 5)
- Technical data (IP address, browser type, and similar request metadata)
3. How we use your data
We use your data to:
- Provide, operate and maintain the service
- Manage your account and workspaces
- Process subscriptions and payments
- Contact you about your account, billing or the service
- Keep the service secure and prevent fraud and abuse
4. Analytics
We care about keeping TinyForms lightweight and privacy-friendly. For website statistics we use Umami, a privacy-focused analytics tool that collects only aggregated, anonymous visit data. It does not use cookies and does not track you across other websites.
We do not use Google Analytics, advertising pixels, or any third-party tracking or profiling tools. We do not sell your data, and we do not share it for advertising purposes.
5. Payments
Payments are processed by Paddle (Paddle.com), which acts as the Merchant of Record for purchases made on TinyForms. When you subscribe, Paddle collects and processes your billing and payment details directly. We do not store full payment card details on our servers. Paddle processes this data as an independent controller under its own privacy policy, available at paddle.com.
6. Data retention
Form submissions are retained according to the retention setting you configure for your workspace (365 days by default). After that period submissions are deleted automatically, with only anonymized statistics kept. Account data is kept for as long as your account is active and for a reasonable period afterwards to meet legal and accounting obligations.
7. Sub-processors and third parties
To run the service we rely on a small number of carefully selected providers, including our cloud hosting provider, our email delivery provider, our analytics provider (Umami) and our payments provider (Paddle). These parties only process data on our behalf or as required to deliver their part of the service.
8. Your rights
Under the GDPR you have the right to:
- Request access to your personal data
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict processing
- Request data portability
- Lodge a complaint with your local data protection authority
9. Data security
We host within the EU and apply appropriate technical and organisational measures to protect your data, including encryption in transit, access controls and regular backups.
10. Changes to this policy
We may update this policy from time to time. Material changes will be reflected by the "last updated" date above and, where appropriate, communicated to you directly.
11. Contact
For questions about this privacy policy or to exercise your rights, email us at support@tinyforms.tools.