Privacy Policy

This Privacy Policy explains how Nicelyformed LLC (“Nicelyformed”, “we”, “us”), based in London, United Kingdom, collects, uses, and safeguards information when you use our form building service at nicelyformed.ai. It covers two groups of people: account holders who build forms (“you”), and people who fill in those forms (“respondents”). For questions about this policy, email contact@nicelyformed.ai.

Information we collect

We collect the following categories of information:

• Account information such as your name, email address, and authentication details. If you sign in with Google, we receive your name, email address, and profile picture from Google.
• Content you create, including the prompts you submit, the forms generated from them, your edits, and any logos or images you upload.
• Form submissions submitted by respondents to forms you publish, including partially completed pages saved as a respondent moves through a form.
• Billing information for paid plans. Card details are collected and stored by our payment processor, Stripe; we never see your full card number.
• Usage datacollected automatically: device and browser information, pages visited, and, on published forms, a random visitor identifier used to measure views, starts, and completions and to enforce a form owner's “one response per person” setting.

How we use information

We use the information we collect to:

• Provide, maintain, and improve the service.
• Generate, edit, and analyze forms and submissions using AI, as described below.
• Process payments and manage subscriptions.
• Communicate with you about your account, submissions, and updates to the service.
• Understand how the service is used so we can improve it.
• Protect against fraud, abuse, and security threats, and comply with the law.

We do not use your data for advertising, and we do not make automated decisions about you that have legal or similarly significant effects.

AI features

When you describe a form, ask for a change, or ask for insights, the relevant text, form structure, and, for insights, the submissions to that form are sent to Google's Gemini API to produce the result. Under Google's paid API terms, that data is not used to train Google's models. We keep a record of your AI prompts to meter your plan's allowance and to improve the feature. AI-generated content can be inaccurate; you are responsible for reviewing forms before publishing them.

Cookies and analytics

We use a session cookie to keep you signed in. Our site analytics (Vercel Web Analytics) are cookieless and do not track you across sites. With your permission (the small cookie notice), we also set one first-party cookie for up to 30 days that remembers which link or search engine brought you here, so we know which of our pages work; declining it changes nothing about how the site works. On published forms we store a random identifier in the respondent's browser to count views and completions and to remember an in-progress draft; it is not linked to a name or email unless the respondent enters one in the form.

Sharing of information

We do not sell your personal information. We share data only with the service providers who help us run the service, each under a contract that limits what they may do with it: Vercel (hosting and file storage), Neon (database), Stripe (payments), Resend (transactional email), and Google (AI features). We may also disclose information when required by law, to protect our rights or the safety of others, or as part of a merger or acquisition, in which case this policy continues to apply to your data.

International transfers

Our providers process data in the United States and the European Union. Where personal data of people in the UK or EEA is transferred outside those areas, we rely on the UK International Data Transfer Agreement or the EU Standard Contractual Clauses, together with the providers' own safeguards.

Data retention

We keep your account information and forms for as long as your account is active. Submissions are kept until you delete them or the form that collected them. When you delete your account, we delete your forms and their submissions within 30 days, after which they may persist in encrypted backups for up to 30 further days before being overwritten. Billing records are kept for as long as tax and accounting law requires.

Security

Data is encrypted in transit. Form submissions are additionally encrypted at rest at the application layer (AES-256) before they are written to our database. Access to production data is limited to what is needed to operate the service. No system is perfectly secure; if we learn of a breach affecting your data, we will notify you as the law requires.

If you filled in a form

The person or organization that published the form is the controller of the answers you gave and decides how they are used; we process those answers on their behalf. To access, correct, or delete your answers, contact the form owner first. If you cannot reach them, email us at contact@nicelyformed.ai and we will help within the limits of our role as a processor.

Your rights

Depending on where you live, you may have the right to access, correct, export, restrict, or delete your personal data, to object to certain processing, and to complain to a supervisory authority (in the UK, the Information Commissioner's Office). See our GDPR page for details on exercising these rights. You can also delete your account from your account settings at any time.

Children

The service is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, email us and we will delete it.

Changes to this policy

We may update this policy from time to time. We will post the new version here with a new date and, for material changes, email account holders before the changes take effect.

Contact us

Nicelyformed LLC, London, United Kingdom. Email contact@nicelyformed.ai with any question about this policy or your data.