Privacy Policy

Last updated: February 25, 2026

FormSentry (“FormSentry”, “we”, “us”, or “our”) provides a form spam detection service available at formsentry.ai and app.formsentry.ai (the “Service”).

This Privacy Policy explains how we collect, use, process, and protect personal information when:

  • You visit our website
  • You create or use a FormSentry account
  • You submit data through our API

1. Scope

This Privacy Policy applies to:

  1. Visitors to our marketing website (formsentry.ai)
  2. Registered users of the FormSentry application (app.formsentry.ai)
  3. Data submitted via the FormSentry API

2. Information We Collect

A. Website Visitors

When you visit our website, we may collect:

  • Name and email address (if submitted via contact forms)
  • Usage data via Google Analytics
  • Device and browser information
  • Pages visited and referring URLs

We use Google Analytics to understand website performance. Google may collect cookies and usage data in accordance with its own privacy policy.

B. Account Information

When you create an account, we collect:

  • Name
  • Email address
  • Authentication data
  • Billing information

We do not store full payment card details.

C. API Submission Data (Customer Data)

When customers send submissions via our API, we process:

  • Submission payload data
  • Form ID
  • Workspace API key
  • IP address (temporarily)
  • Country (derived from IP)
  • Request metadata (timestamp, user agent, headers)

We do not use browser fingerprinting or client-side tracking scripts.

3. How We Use Information

We use collected information to:

  • Provide spam detection services
  • Authenticate users
  • Process payments
  • Maintain platform security
  • Provide customer support
  • Improve system reliability
  • Generate anonymised statistical insights

We do not sell personal information.

4. Customer Data Processing

For API submissions:

  • The customer is the data controller
  • FormSentry acts as a data processor

We process submission data solely to provide spam detection services.

We do not use one customer’s data to train or improve detection for other customers.

Training data marked within a workspace is used only within that workspace.

5. Data Retention

Submission Payloads

Full submission payloads are stored according to the customer’s configured retention setting (e.g., 30 days or 365 days).

After expiry:

  • Full payload data is permanently deleted
  • IP addresses are deleted
  • Only anonymised statistical metadata (such as country and classification counts) may be retained

This anonymised data cannot identify individuals.

Account Deletion

If a customer deletes their account:

  • Workspace data is deleted immediately
  • Data may persist in encrypted backups for up to 30 days
  • Billing records may be retained as required by law

6. Data Hosting & Subprocessors

All production systems are hosted in the United States (Ohio region).

We use the following subprocessors:

  • Cloud infrastructure providers
  • Database hosting providers
  • Payment processors
  • Authentication providers
  • Monitoring providers
  • Website analytics providers

Data may be processed in the United States.

7. Logging

We log:

  • IP address (retained only during active data lifecycle)
  • Country
  • Timestamp
  • User agent
  • API key usage metadata
  • Raw request headers

We do not use fingerprinting technologies.

8. Aggregated & Anonymised Data

We may use aggregated and irreversibly anonymised data to:

  • Improve our services
  • Generate usage statistics
  • Develop system insights

This data does not identify individuals.

9. Security

We implement technical and organisational safeguards including:

  • Encrypted transmission (HTTPS/TLS)
  • Secure hosting infrastructure
  • Access controls
  • Key-based authentication

However, no system is completely secure.

10. International Users

If you access the Service from outside the United States, your data may be processed in the United States.

11. Your Rights

Depending on your location, you may have rights to:

  • Access personal data
  • Request correction
  • Request deletion
  • Restrict processing

12. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us via our contact page:

https://www.formsentry.ai/contact

Company: FormSentry
Jurisdiction: New South Wales, Australia