Fee Fi Form

This Privacy Policy explains how Fee Fi Form ("we", "us") collects, uses, discloses, and safeguards your information when you use our platform. We comply with the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act/California Privacy Rights Act (CCPA/CPRA).

1. Who we are

Fee Fi Form is a multi-tenant form-building and CRM platform. When you submit a form embedded by one of our customers (an "Organization"), that Organization is the data controller; we act as a processor on their behalf.

2. What we collect

Account data: name, email, password hash, organization membership.
Form submissions: any data you enter into a form (controlled by the publishing Organization).
Technical data: IP address, user agent, referrer — only when the form's privacy settings allow it.
Cookies: see our Cookie Policy.

3. Lawful bases (GDPR Art. 6)

Contract — to provide the service to account holders.
Consent — for analytics, marketing cookies, and any consent fields shown on a form.
Legitimate interests — for service security, abuse prevention, and aggregate analytics.
Legal obligation — for tax and accounting records.

4. Your rights

You have the right to access, rectify, erase, restrict, port, and object to processing of your personal data, and to withdraw consent at any time. CCPA residents additionally have the right to know, delete, correct, opt out of "sale or sharing", and to non-discrimination.

To exercise these rights, submit a request through our Data Rights portal. We respond within 30 days.

5. Data retention

Account data is retained while your account is active. Form submissions follow the retention period set by the publishing Organization on each form. After expiry, submissions are permanently deleted.

6. Data sharing & sub-processors

We share data with vetted infrastructure providers (hosting, database, email delivery) bound by data-processing agreements. We never sell personal data.

7. International transfers

When data is transferred outside your region, we rely on Standard Contractual Clauses or equivalent safeguards.

8. Security

Data is encrypted in transit (TLS 1.2+) and at rest. Access is governed by role-based permissions and row-level security at the database layer.

9. Children

Fee Fi Form is not directed to children under 16. We do not knowingly collect data from children.

10. Contact & DPO

For privacy questions, contact our Data Protection Officer at privacy@feefiform.com.

11. Changes

We may update this policy and will post the revised version with a new effective date.