Privacy Policy

Account and identity data: name, email address, phone number, role, organization membership, profile information, avatar or branding images, and other information you or your organization choose to provide.

Operational and record data: work orders, schedules, meetings, events, procedures, training records, notes, forms, comments, attachments, invoices, estimates, customer requests, location records, asset records, inventory records, fleet data, pool logs, layout records, and other data your organization enters into the tools it uses.

Communications data: mailbox content, replies, notification preferences, message metadata, and support or customer-contact submissions sent through FORM-managed inboxes, public request pages, or operational messaging features.

Consent and preference data: legal acceptances, SMS consents, marketing email opt-in or opt-out records, unsubscribe events, and the source, timestamp, or device details tied to those choices.

Payment and billing data: subscription status, plan selection, billing metadata, invoices, payment records, Stripe customer and connected-account identifiers, checkout events, and transaction records needed to bill organizations and route customer payments correctly.

Public website and request data: information submitted through signup, login, contact, support, pricing, request, and other public forms, including organization-setup and service inquiry information.

Device, app, and diagnostic data: browser and device type, operating system, app version, IP address, session and cookie data, crash reports, logs, diagnostics, performance metrics, and usage information used to operate, secure, and improve the Services.

Mobile and native-device data: if you use supported native app features, we may process permissions and device-state data related to camera, file access, notifications, NFC, Bluetooth, or location as needed for scanning, attachments, Tap to Pay, reader discovery, or other device-dependent features you choose to use.

Provide, maintain, and secure the Services and the workflows your organization chooses to use.

Authenticate users, maintain session state, remember account context, and keep users signed in securely across the website, web app, and mobile app.

Deliver notifications, operational updates, support responses, public request routing, invoice emails, and other communications you or your organization request.

Send BCS/FORM product updates, marketplace announcements, promotions, and related marketing emails when you separately opt in to receive them.

Support operational workflows such as work routing, scheduling, training, records management, billing, email delivery, in-person payments, reporting, and customer-contact handling.

Process subscriptions, invoices, checkout flows, Connect onboarding, payment routing, transaction fees, and related billing operations.

Improve performance, reliability, product quality, safety, workflow clarity, and user experience.

Detect, investigate, and prevent security incidents, misuse, fraud, unauthorized access, abuse of payment systems, and violations of our terms.

We use cookies, session tokens, and similar browser or app storage to keep users signed in, maintain security state, remember organization context, preserve preferences, and support core product functionality.

We may also store non-sensitive local preferences on your device or browser, such as UI state, wallpaper or appearance preferences, and lightweight cached app state that improves performance.

We do not intentionally store your plain-text passwords in local browser or app-managed storage.

We use Stripe and related billing providers to process subscriptions, invoices, card payments, Tap to Pay, connected-account onboarding, and associated payment events.

When an organization uses FORM invoicing or Stripe Connect features, we may store and process billing metadata, payment event identifiers, connected-account identifiers, and invoice or checkout records needed to route payments, reconcile transactions, and apply FORM fees.

Payment card data is processed by our payment providers and is not fully stored by FORM except for the limited metadata needed to support billing, fraud prevention, reconciliation, and support.

We may use hosted email and notification providers to deliver invoice emails, support replies, shared mailbox messages, login or account notices, and other operational communications.

If you separately opt in, we may also use those providers to send BCS/FORM marketing emails about FORM products, services, marketplace tools, updates, and related offers. Those marketing emails are optional and separate from service-request or account communications.

Organizations may use FORM-managed inboxes and shared organizational mailbox features. Authorized users inside the organization may be able to view, reply to, or manage those communications based on role, tag, or admin permissions configured in the app.

We do not sell private message content, mailbox content, or operational communications, and we do not use them for third-party advertising.

Some FORM features may use AI or automation providers to summarize, classify, draft, assist, or otherwise process content when your organization chooses to use those features.

When an AI-assisted feature sends content to an AI provider to perform the requested task, that content may be processed by that provider on our behalf or on behalf of your organization, subject to our agreements and the feature's configuration.

We do not treat your operational records, mailbox content, or customer data as advertising inventory. We may use aggregated, anonymized, or de-identified usage information to improve product performance and feature quality.

We share data with service providers that help us operate the Services, such as hosting, infrastructure, authentication, storage, email delivery, notifications, customer support, payments, and analytics providers. These providers are expected to protect the data they process for us and use it only to provide services on our behalf.

Within an organization, authorized admins, managers, tagged users, or mailbox users may be able to access information your organization stores in FORM based on permissions, workflow settings, or organizational controls.

When you use FORM marketplace or public request tools to contact providers, we may share the request details, uploaded files, and contact information you submit with matched contractors, vendors, or companies so they can review the lead, send quotes, schedule work, or contact you through FORM or directly by email, phone, or text.

We do not sell your personal data or Customer Data to third parties, and we do not share Customer Data for third-party advertising.

We may disclose information if required by law, to respond to lawful requests, to enforce our agreements, or to protect safety, rights, property, users, BCS, payment systems, or the security of the Services.

We may use aggregated, anonymized, or de-identified information to understand product performance, improve operational tools, refine workflows, and improve reliability, provided that information does not identify you or your organization.

If you use FORM through an organization, that organization generally controls the workspace, user access, records, retention choices, organizational mailboxes, billing posture, and many administrative settings tied to your account.

Organization administrators may be able to add or remove users, change permissions, access records created within the organization, manage notifications, configure billing and invoice settings, and delete or export organization-controlled data.

If you have questions about data controlled by the organization that invited you, you may need to contact that organization in addition to contacting us.

We retain data for as long as your organization maintains an account or as needed to provide the Services, keep operational records available, support billing and payment reconciliation, maintain auditability, and preserve system integrity.

We may also retain information where needed for security, legal compliance, billing records, dispute resolution, backups, audit logs, abuse prevention, and legitimate business operations.

You can request access to or deletion of your data by contacting support, subject to organization controls, legal requirements, payment-record retention needs, and technical limitations.

We use safeguards intended to protect data, including access controls, encrypted transport, provider security controls, authentication controls, and operational monitoring appropriate to the Services we run today.

No method of transmission, storage, application security, device security, or internet-connected service is 100% secure, so we cannot guarantee absolute security or guarantee against loss, theft, deletion, corruption, or unauthorized access.

Update your profile, notification preferences, theme settings, and other supported account settings in the app.

Opt out of non-essential notifications where available, and use the unsubscribe link in any marketing email to stop future marketing messages.

Request data access or deletion by contacting support, subject to organization and legal controls.

Export important operational records where export tools are available.

Our products are intended for organizational and business use and are not directed to children under 13. We do not knowingly collect data from children.

If you access the Services from outside the United States, you understand that your data may be processed in the United States and other regions where our service providers operate.

We may update this policy from time to time. We will post the updated version here and update the effective date above.

Questions about privacy? Contact Bratton Creative Solutions at form@form-maint.com.