Privacy Policy

1. Overview

FormCraft is a personal creator intelligence application at https://form-craft-phi.vercel.app. This policy explains what data we collect, why we collect it, who we share it with, and how you can remove it. We collect only what the product needs to work for you. We do not sell your data.

2. Data we collect

Account data

Your email address and authentication identifiers, handled by our authentication provider. We never see or store your password in plain text.

Content you provide

Notes, uploaded documents, strategy and voice guidelines, drafts, ideas, experiments, roadmaps, and any URLs or references you save.

Connected social account data

When you connect YouTube, Instagram, or TikTok through their official APIs, we store the access tokens needed to keep the connection working and the data covered by the permissions you granted, which may include:

• Your public profile details, such as username, display name, avatar, and follower count.
• Your published posts and videos, including captions, titles, thumbnails, publish dates, and durations.
• Metrics for those posts, such as views, likes, comments, shares, and saves where the platform provides them.

We request read-only access. FormCraft does not post, comment, message, or take any other action on your behalf on connected platforms.

Public research data

When you use research features, we store publicly available metadata about the posts and creators you discover or track, along with the source, the collection method, and the retrieval time. We store this to calculate creator-relative performance baselines over time.

Usage data

Basic operational records such as AI request counts and costs, external data provider usage, error logs, and standard server logs from our hosting provider.

3. How we use data

• To operate core features: syncing your content, calculating your performance baselines, and surfacing research results.
• To generate analyses, summaries, recommendations, and drafts using AI models.
• To enforce usage limits and budgets so the service stays affordable and predictable.
• To diagnose errors, prevent abuse, and keep the service secure.

We do not use your content or connected account data to train our own machine learning models, and we do not use it for advertising.

4. Service providers we share data with

• Supabase — database, authentication, and file storage.
• Vercel — application hosting and server logs.
• AI model providers accessed through OpenRouter — relevant excerpts of your content and context are sent to generate analyses, ideas, and drafts. Only the material needed for a given request is sent.
• Platform APIs (YouTube, Instagram, TikTok) — we request your data from these platforms using the access you authorised.

We do not sell personal data, and we do not share it with advertisers or data brokers.

5. Storage, security, and retention

• Data is stored in our Supabase project with row-level security so each account can only read its own records.
• Access tokens for connected platforms are stored server-side and are never exposed to the browser.
• Data is transmitted over HTTPS.
• We keep your data while your account is active. When you delete your account or disconnect a platform, the associated data is deleted as described below.

No system is perfectly secure. We use reasonable safeguards but cannot guarantee absolute security.

6. Your choices and rights

• Disconnect a platform: use the Connections page. This revokes FormCraft’s stored access and stops further syncing. You can also revoke access directly in your YouTube, Instagram, or TikTok account settings.
• Delete specific data: content, notes, research items, and connections can be deleted from within the app.
• Delete your account: email us and we will delete your account and associated data.
• Access or export: email us for a copy of the data we hold about you.

Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA, including the right to correct or restrict processing of your data. Contact us to exercise them.

7. Data deletion requests

To request deletion of your account and all associated data, email support@formcraft.app from the address on your account with the subject “Data deletion”. We will confirm and complete the deletion within 30 days, except where we are required to retain limited records by law.

8. Children

FormCraft is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.

9. Changes to this policy

We may update this policy as the service changes. Updates are reflected by a new “last updated” date on this page.

10. Contact

Privacy questions and requests can be sent to support@formcraft.app.