FurmBaseFurmBase

Legal

Privacy Policy

Last updated: August 17, 2026

Welcome to FurmBase (“we,” “us,” or “our”). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services at furmbase.com (the “Service”). Please read this policy carefully. If you do not agree with its terms, please do not access or use the Service.

1. Who This Policy Covers

Two different groups of people use FurmBase, and the difference matters for your rights:

  • Form creators — people with a FurmBase account who build and publish forms. For your account data, we are the data controller.
  • Respondents — people who fill in a form someone else built. For the answers you submit, the form creator is the data controller and we are their processor: we store and handle those answers on their instructions.

If you filled in a FurmBase form and want your answers accessed, corrected, or deleted, please contact the person or organization whose form you filled in. If you cannot reach them, email us at furmbase@outlook.com and we will help where we can.

2. Information We Collect

a. Information You Provide Directly

  • Name and email address
  • Password (stored in hashed form; we never store plaintext passwords)
  • Profile picture, if you upload one
  • Content you create, such as forms, questions, and settings
  • Responses and file uploads submitted by people who fill out your forms
  • Messages you send us through the contact form or support chat
  • Payout details you enter to receive money — bank name, account number, and account name

Card details. We never see or store your full card number. Card payments are handled entirely by our payment processor. Where you authorize automatic renewal, our processor keeps a token that lets us charge that method again; we hold the token, not the card.

b. Information Collected Automatically

  • IP address, browser type and version, operating system and version, and device type
  • Approximate location — city, region, and country — derived from your IP address by our hosting provider. We do not derive a street address from your IP.
  • A device identifier we generate and store in your browser, so we can recognize a device you have signed in from before
  • Pages visited, actions taken, and time of access
  • Cookies and similar technologies, as described in Section 7

Sign-in records. When you sign in, we record the device, browser, operating system, IP address, and approximate location. We keep one record per device rather than one per sign-in, and we update it when a known device appears on a new network. The purpose is to show you your active sessions and alert you to access you may not recognize.

c. Precise Location on Public Forms

When someone opens a published FurmBase form, their browser may ask permission to share precise location. If permission is granted, the coordinates are sent to a third-party mapping service to convert them into a place name, which is stored with the response.

This is optional. Refusing the permission does not prevent the form from being submitted, and no coordinates leave the device. We also record device type and browser user-agent with each response.

d. Information from Third-Party Services (Google)

When you connect your Google account to FurmBase, including for Google sign-in or Google Sheets integrations, we collect and process the Google data needed to provide the feature you choose to use.

  • Google Account Email Address - used to identify and link your Google account to your FurmBase account.
  • Basic Profile Information - such as your name and profile picture, used to display your identity within the Service.
  • Google Sheets Access (https://www.googleapis.com/auth/spreadsheets) - used solely to create, read, and update Google Sheets spreadsheets when you choose to export or sync your FurmBase form responses.
  • Google Drive File Access (https://www.googleapis.com/auth/drive.file) - used solely to create and manage the specific Google Sheets files that FurmBase creates on your behalf. We do not access other files in your Google Drive.

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service
  • Create and manage your FurmBase account
  • Enable Google sign-in and Google Sheets export or sync features
  • Process subscription payments and manage your plan
  • Process payments collected through your forms, credit your wallet, and pay out withdrawals
  • Show you your active sessions and warn you about unrecognized sign-ins
  • Send you service email — receipts, renewal reminders, security notices, and account-deletion notices
  • Provide the AI features you choose to use
  • Understand and analyze how the Service is used, and improve it
  • Detect and prevent fraud and abuse
  • Comply with legal obligations

We do not sell your personal information, and we do not use the responses collected in your forms for advertising.

4. Google API Services - Limited Use Disclosure

FurmBase’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, we commit to the following:

  • Limited use: We only use Google user data to provide and improve the features you have explicitly requested.
  • No advertising: We do not use Google user data for advertising purposes.
  • No selling: We do not sell Google user data to anyone.
  • No human reading: We do not allow humans to read your Google data unless we have your explicit consent, it is necessary for security or to comply with the law, or the data is aggregated and anonymized.

5. Sharing Your Information

We do not sell or rent your personal information. We share it only with service providers who help us run FurmBase, and only to the extent each one needs to do its job. Those providers fall into the following categories:

  • Cloud hosting, database, and storage providers — hold your account, forms, responses, and uploaded files, and process request data such as your IP address.
  • Payment processors — handle subscription charges and payments collected through your forms, and receive the payer and transaction details needed to complete them.
  • Email delivery providers — send the service email described above.
  • AI providers — receive only the content you submit to an AI feature at the moment you use it, such as a prompt you type or responses you ask us to analyze. We do not send your data to an AI provider in the background.
  • Customer support tools — receive what you type into the support chat on our public pages. Support chat is not loaded on signed-in dashboard pages.
  • Mapping and location services — convert coordinates into a place name where a respondent has granted location permission on a form.
  • Media delivery providers — serve images shown on the Service.

Each provider is bound by its own agreement with us and may use the data only to provide its service to FurmBase. If you would like to know which specific providers we use, email us at furmbase@outlook.com and we will tell you.

We may also disclose information:

  • Legal requirements: if required by law or valid legal process.
  • Business transfers: during a merger, acquisition, or sale of assets.
  • With your consent: for any other purpose you explicitly agree to.

6. Data Retention

  • Account data is retained while your account exists. See Section 8 for what happens when you ask us to delete it.
  • Form responses are retained until you delete them, or until the form or account they belong to is deleted.
  • Sign-in and session records are retained so you can review the devices that have accessed your account.
  • Google OAuth tokens are retained only while your Google account is connected. They are permanently deleted when you disconnect Google or when your FurmBase account is deleted.
  • Payment and payout records are retained longer where financial, tax, or anti-fraud regulations require it, including after account deletion.
  • Deletion requests are retained as a record that the request was made, including when it was cancelled.

7. Cookies and Tracking Technologies

We use cookies and similar browser storage to:

  • Keep you signed in to your account
  • Remember your preferences and settings
  • Store the device identifier that lets us recognize a device you have used before
  • Analyze aggregate usage patterns to improve the Service

You can configure your browser to refuse cookies or alert you when they are sent. Refusing them will stop you being able to stay signed in.

8. Account Deletion and Data Control

You can request deletion of your account from Settings in your dashboard. Deletion is a request with a 30-day window, not an instant erasure — accounts on FurmBase can hold money and run live forms, so we do not destroy them on a single click.

  • Your account is locked as soon as you submit the request. You can still sign in, but only to view the deletion screen and cancel.
  • We email you a reminder about a week before the date and a final warning the day before.
  • You can cancel at any time and everything is restored. We keep a record that the request was made and cancelled.
  • If 30 days pass, your published forms are unpublished so they stop collecting data and payments, and the request is passed to our team. Nothing is deleted automatically.
  • Any wallet balance is held for you. It does not expire and is never forfeited.
  • To finish deletion, withdraw any balance and email furmbase@outlook.com. Our team completes it from there.

When deletion is completed, we remove your profile, forms, responses, settings, session records, and stored integration tokens such as Google OAuth credentials. We retain limited records only where required for security, fraud prevention, legal, tax, accounting, or payment compliance.

Other rights. Depending on where you live, you may have the right to access, correct, export, or restrict the processing of your personal data, and to object to it. Email furmbase@outlook.com and we will respond. If you are a respondent rather than an account holder, please see Section 1.

9. Data Security

We implement industry-standard security measures to protect your personal information, including:

  • Encryption of data in transit (TLS/HTTPS)
  • Encryption of sensitive data at rest
  • Database access rules restricting each account to its own data
  • One-time codes to confirm sensitive actions such as withdrawals
  • Access controls for authorized personnel only
  • Regular security reviews and monitoring

No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

10. International Data Transfers

the service providers described in Section 5 operate globally, so your information may be stored or processed in countries other than your own, including outside your region of residence. Where that happens, we rely on the safeguards those providers put in place for international transfers.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify you by email or in-app notification. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

FurmBase
Email: furmbase@outlook.com
Website: https://furmbase.com