Privacy Policy

1. Introduction

MakeForms ("we," "us," or "our") is operated by Hello Digital, a company registered in India. This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use our lead qualification form platform at qualifiedleadforms.com and makeforms.io.

By using MakeForms, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account information

When you create a MakeForms account, we collect your name, email address, company name, and payment information. Payment information is processed by Stripe and is not stored on our servers.

2.2 Form submission data

When end users complete forms created by MakeForms customers, we collect the data submitted in those forms on behalf of our customers. MakeForms customers control what data is collected through their forms. We are a data processor for this data; the MakeForms customer is the data controller.

2.3 Usage data

We collect information about how you use MakeForms, including pages visited, features used, form creation and submission events, and error logs. This data is used to improve the platform and diagnose technical issues.

2.4 OTP verification data

Phone numbers submitted for OTP verification are used solely to send the verification code via SMS. We do not store phone numbers beyond what is necessary to complete verification and provide the lead data to the MakeForms customer.

3. How We Use Your Information

• To provide, operate, and improve the MakeForms platform
• To process payments and manage your account
• To send transactional emails (account confirmation, password reset, invoices)
• To respond to support requests
• To detect and prevent fraud and security incidents
• To comply with legal obligations

We do not sell personal information to third parties. We do not use form submission data collected on behalf of customers for our own marketing purposes.

4. Data Storage and Security

MakeForms stores data on Amazon Web Services (AWS) infrastructure. The default data region is US-East (Virginia). EU and Canadian data residency options are available for GDPR and PIPEDA compliance respectively.

All data is encrypted at rest using AES-256. All data in transit is encrypted using TLS 1.3. MakeForms is SOC 2 Type II certified and ISO 27001 certified.

5. HIPAA

For customers who use MakeForms to collect Protected Health Information (PHI), MakeForms signs a Business Associate Agreement (BAA) with customers on the Pro plan and above. MakeForms maintains HIPAA-compliant technical safeguards including AES-256 encryption, TLS 1.3 in transit, US data residency, tenant-isolated encryption keys, and PHI field marking.

6. Data Sharing and Sub-processors

We share data with sub-processors necessary to operate the platform. Our primary sub-processors include:

• Amazon Web Services — infrastructure and storage
• Stripe — payment processing
• ActiveProspect — TrustedForm certification
• SendGrid — transactional email delivery
• Google — Maps API for address verification (address data only, not stored)

A complete sub-processor list is available at makeforms.io/subprocessors. Customers are notified 30 days before new sub-processors are added.

7. Data Retention

Account data is retained for the duration of your subscription plus 90 days after account closure. Form submission data is retained for the period specified in your plan or until you delete it. Deletion requests are processed within 30 days.

8. Your Rights

Depending on your location, you may have the right to: access the personal data we hold about you; correct inaccurate data; request deletion of your data; object to certain processing; and port your data to another service. To exercise these rights, contact [email protected].

9. Cookies

MakeForms uses essential cookies for authentication and security. We use analytics cookies (with consent) to understand how the platform is used. We do not use advertising or tracking cookies. You can control cookie preferences through your browser settings.

10. Children's Privacy

MakeForms is not intended for use by individuals under 16 years of age. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify customers of material changes by email at least 30 days before the change takes effect. Continued use of MakeForms after the effective date constitutes acceptance of the updated policy.