Privacy Policy

What we collect

• Account info — name, email, and authentication details when you sign up. Provided by Clerk.
• Form content — titles, descriptions, fields, and AI hints you create.
• Responses — answers submitted by people filling out your forms.
• Logs — request metadata (IP, timestamps, user agent) for security and debugging.

What happens to your data with AI

Fields tagged as PII (email, URL, and any field a form author marks private) are captured client-side and never transit our AI infrastructure. The AI sees only a "captured" confirmation token, never the value itself.

All other content (form titles, descriptions, AI hints, and respondent text answers) does pass through our AI infrastructure to power the conversational flow. Specifically:

• Requests transit Vercel AI Gateway, which routes them to the model provider. Per Vercel's published policy, the Gateway does not retain prompts or responses — they are deleted immediately after each request completes. Only request metadata (model name, token counts, latency) is retained for billing and analytics.
• Inference runs on Anthropic (Claude Haiku 4.5). Per Anthropic's commercial terms, API data is not used to train Anthropic's models.

Sub-processors

We use the following third parties to operate Formbase:

• Vercel — hosting and AI Gateway routing
• Clerk — authentication
• Neon — PostgreSQL database (US-East)
• Resend — transactional email (response notifications)
• Anthropic — AI inference, accessed via Vercel's AI Gateway

Each handles data per their own privacy policies.

Your choices

• Export — download your form responses as CSV from the Responses tab.
• Delete — request account or form deletion by emailing abedhamami42@gmail.com.

Alpha disclaimer

Formbase is in active development. Data may be migrated, schemas may change, and we do not yet guarantee long-term retention or backups. Avoid putting mission-critical data into Formbase until we exit alpha.

Contact

Questions about this policy? Email abedhamami42@gmail.com.