Privacy Policy

1. Introduction

MFC Softwares ("we," "us," or "our") operates the MyFormCapture platform, accessible at myformconnect.io and myformcapture.com (together, the "Services"). This Privacy Policy describes how we collect, use, disclose, and safeguard Personal Information in connection with the Services. By using the Services, you acknowledge that you have read and understood this policy.

In this policy, "you" refers to all persons who access or interact with the Services. "Account Holders" or "Customers" refers to businesses and individuals who register for an account and use the Services to receive and manage form submissions. "Form Respondents" refers to individuals who fill in and submit forms on a Customer's website that are powered by the Services.

2. Information We Collect

2.1 From Account Holders

When you register for or use the Services, we collect:

• Registration information: name, email address, and password, or identity information provided through OAuth sign-in (Google or Microsoft).
• Billing information: payment details processed through our payment providers. We do not store full card numbers; all payment data is handled by PCI-compliant processors.
• Account and configuration data: form settings, integration configurations, team preferences, and other data you provide while using the platform.
• Communications: messages you send us via support requests, contact forms, or email.

2.2 From Form Respondents

When an individual submits a form on a Customer's website that is connected to our Services, we collect and store the submission data on behalf of that Customer. The content of that data — which may include names, email addresses, phone numbers, uploaded files, and any other fields the Customer has configured — is determined entirely by the Customer. We treat all form submission data as private and process it only as directed by the Customer.

If you have submitted a form on a third-party website and have questions about how your data is used, please contact that website's owner directly. The Customer is the data controller for form submission data; MFC Softwares acts as a data processor.

2.3 Automatically Collected Information

When you access our websites or dashboard, we automatically collect certain technical and usage data, including:

• IP address, browser type, operating system, and device information
• Pages visited, referring URLs, timestamps, and session duration
• Usage events within the dashboard, collected via analytics services described in Section 5

3. How We Use Personal Information

We collect and process Personal Information for the following purposes and on the following legal bases:

• Performance of contract: To provide, operate, maintain, and support the Services you have subscribed to, including processing and delivering form submissions to you.
• Legitimate interests: To improve and develop the Services; to detect and prevent fraud, spam, and abuse; to maintain the security and integrity of our systems; and to understand how our Services are used.
• Consent: To send marketing communications, which you may opt out of at any time by clicking "unsubscribe" in any such communication or by contacting us.
• Legal obligation: To comply with applicable laws, respond to lawful government requests, and enforce our agreements.

We do not sell Personal Information to third parties, and we do not use form submission data for our own marketing or analytics purposes.

4. Google API Services — Limited Use Disclosure

MyFormCapture integrates with Google APIs (Google Calendar and Google Sheets) on behalf of Account Holders who choose to connect those integrations. Our use and transfer of information received from Google APIs to any other application or service adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• Google user data is used only to provide the functionality of the integration you have explicitly connected — it is not used for advertising, profiling, or any purpose unrelated to the integration.
• We do not share Google user data with third parties except as strictly necessary to operate the integration (e.g. securely storing OAuth tokens).
• We do not use Google user data to train machine learning or artificial intelligence models.
• You may disconnect a Google integration at any time from the Integrations page in your account. Access may also be revoked directly at myaccount.google.com/permissions.

The following Google API scopes are requested by the Services, depending on which integrations you enable:

Integration	Scopes Requested	Purpose
Google Calendar	calendar, calendar.events, userinfo.email, userinfo.profile	Create and manage calendar events for lead scheduling; identify the connected account in the dashboard
Google Sheets	spreadsheets, drive.file, userinfo.email, userinfo.profile	Write form submission data to spreadsheets you select; identify the connected account in the dashboard
Google Sign-In	email, profile	Authenticate your account using your Google identity in lieu of a password

5. Third-Party Services and Sub-Processors

We engage the following categories of third-party service providers to operate the Services. All such providers are contractually required to process Personal Information only as directed by us and in accordance with this policy.

5.1 Integrations (Opt-In)

The following services receive data only when you explicitly connect the relevant integration. You may disconnect any integration at any time from the Integrations page.

Service	Purpose	Data Transmitted
Google Sheets	Automatic export of form submissions to a spreadsheet	Form submission fields you have mapped
Google Calendar	Creation and management of calendar events for scheduling	Event details, attendee information
Slack	Real-time form submission notifications to your Slack workspace	Form fields and notification content
Discord	Real-time form submission notifications to your Discord server	Form fields and notification content
Telegram	Form submission notifications via Telegram bot	Form fields and notification content
Airtable	Synchronisation of form submissions to an Airtable base	Form submission fields you have mapped
Kit (ConvertKit)	Addition of form submitters as subscribers in your Kit account	Email address and mapped fields
Zapier	Triggering of automated workflows from form submissions	Form submission fields sent to your Zapier webhook
Stripe Connect	Donation payment processing via your connected Stripe account	Connected account identifiers; payments go directly to your Stripe account
PayPal	Donation payment processing via your connected PayPal account	PayPal account email and payer ID; payments go directly to your PayPal account

5.2 Platform Infrastructure and Operations

Service	Purpose
Amazon Web Services (S3)	Secure storage of files uploaded through forms
Stripe / Dodo / PayPal	Subscription billing for MyFormCapture plans
Cloudflare Turnstile	Bot and spam protection on sign-up and login
Google Analytics 4	Aggregate website and dashboard usage analytics (consent-gated)
Google Ads	Advertising conversion tracking (consent-gated)
Twilio	Optional SMS notifications for lead alerts

6. Information Sharing and Disclosure

We do not sell or rent Personal Information. We disclose Personal Information only in the following circumstances:

• To provide integrations you have enabled: When you connect a third-party integration, relevant submission data is transmitted to that service on your behalf and subject to that service's privacy policy.
• To our service providers: We share information with the infrastructure and operations providers listed in Section 5 solely to the extent necessary for them to perform their services.
• For legal compliance: We may disclose Personal Information when required to do so by law, court order, or valid legal process, or when we reasonably believe such disclosure is necessary to protect the rights, property, or safety of MFC Softwares, our users, or the public.
• In connection with a business transfer: In the event of a merger, acquisition, or sale of substantially all of our assets, Personal Information may be transferred to the acquiring entity. We will notify Account Holders by email or in-app notice before any such transfer takes effect.
• With your consent: For any other purpose with your explicit consent.

7. Data Storage and Regional Residency

We operate two production environments, each with a distinct data residency:

• myformconnect.io — Account data and form submission data are stored on servers located in the European Union (EU).
• myformcapture.com — Account data and form submission data are stored on servers located in the Asia-Pacific region.

Certain ancillary data (such as analytics events and infrastructure logs) may be processed by third-party service providers outside the primary region. Where such transfers occur, we take appropriate measures to ensure that Personal Information receives a level of protection consistent with this policy and applicable law.

8. Data Security

We implement appropriate technical and organisational measures to protect Personal Information against unauthorised access, loss, destruction, or alteration. These measures include encryption of data in transit (TLS), encrypted storage of OAuth tokens and sensitive credentials, and access controls that restrict data access to authorised personnel on a need-to-know basis.

Notwithstanding these measures, no method of transmission over the internet or electronic storage is entirely secure. We cannot guarantee absolute security. If you believe your account has been compromised, please contact us immediately at [email protected].

9. Data Retention

We retain Personal Information for as long as your account is active and for a reasonable period thereafter as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. Form submission data is retained until deleted by you or until your account is closed.

OAuth tokens for third-party integrations are deleted upon disconnection of the relevant integration. Log data is retained for security and operational purposes in accordance with industry-standard practices.

Account and data deletion: To request the deletion of your account and all associated data, please email [email protected] or submit a request through the support form on our website. We will complete the deletion within 14 working days of receiving a verified request.

10. Your Rights and Choices

Depending on your jurisdiction, you may have certain rights with respect to your Personal Information, including:

• Access and portability: The right to request a copy of the Personal Information we hold about you.
• Correction: The right to request correction of inaccurate Personal Information, which may also be updated directly in your account settings.
• Deletion: The right to request deletion of your Personal Information, subject to any legal retention obligations (see Section 9).
• Restriction and objection: The right to restrict or object to certain processing of your Personal Information, where permitted by applicable law.
• Withdrawal of consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
• Opt-out of marketing: You may unsubscribe from marketing communications at any time using the link in any such communication or by contacting us.

To exercise any of these rights, please contact us at [email protected]. We will respond within a reasonable period, not exceeding one calendar month from receipt of a verified request.

11. International Data Transfers

If you are located in a jurisdiction outside the region where your data is stored (as described in Section 7), your Personal Information will be transferred internationally in order to provide the Services. We take appropriate steps to ensure such transfers are made in accordance with applicable law and that your Personal Information continues to receive adequate protection.

12. Children's Privacy

The Services are intended for use by businesses and individuals who are at least 18 years of age. We do not knowingly collect Personal Information from individuals under the age of 18. If we become aware that we have inadvertently collected such information, we will take prompt steps to delete it. If you believe we have collected information from a minor, please contact us at [email protected].

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. We will notify Account Holders of material changes by posting an updated policy on this page, updating the "Last updated" date, and where appropriate, by sending an email notification or displaying an in-app notice. Your continued use of the Services following the effective date of any such change constitutes your acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

Email: [email protected]
Company: MFC Softwares
Support Hours: Monday to Friday, 9:00 AM – 5:00 PM IST