Privacy Policy

("we," "us," or "our") operates the application (accessible at and ).

This Privacy Policy explains what information we collect, how we use it, with whom we share it, how we store and protect it, and how long we keep it. It applies when you visit our website, use the dashboard, connect a Facebook or Google account, or use our embeddable form tools.

1. Information We Collect

We collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with you ("Personal Information").

1.1. Data from Google

When you choose to connect your Google account to , you grant us access to the Google scopes listed below. We only access the data needed for the feature you use.

• Name and email address (via the userinfo.email and userinfo.profile scopes): We use these to identify the Google account you connected and to show its name in your dashboard. We do not currently store your Google profile picture.
• Google Sheets files you select (via the drive.file scope): This scope gives us access only to the spreadsheets you choose for our Google Sheets integration. When a form submission matches an integration rule, we add it as a row in that spreadsheet. We do not access other files in your Google Drive.
• Google Ads conversion data (via the datamanager scope): When you send a form conversion to a Google Ads account you have configured, we send the conversion to Google's Data Manager API. After each send, we request the processing status of that conversion from Google (requestStatus:retrieve) and store the result so it can be shown in your dashboard.
• Access and refresh tokens: We store the OAuth access and refresh tokens that allow us to act on your behalf for the features above. These tokens are encrypted before they are stored.

1.2. Data from Facebook (Meta)

When you choose to connect your Facebook account to , we collect the following data based on the permissions you grant:

• Public Profile Information: Your Facebook public name and profile picture (via the "public_profile" permission).
• Facebook Page Data: Information about the Facebook Pages you administer.
• Facebook Lead Data: We access and process Lead Forms associated with your Facebook Pages so that you may view, download, and manage leads within our dashboard.

1.3. Data from Embeddable Forms

We provide tools that allow you (the "User") to create forms and embed them on your own websites to collect data from your visitors ("Respondents").

• Form Content: We store the content and structure of the forms you create.
• Respondent Data: When a Respondent submits a form you created, we collect and store the data they enter. This may include personal details (e.g., names, emails, phone numbers) depending on the fields you choose to include in your form.
• Controller vs. Processor: Regarding Embeddable Form data, you are the Data Controller (you decide what to collect and why), and acts as the Data Processor (we store and process this data on your behalf).

1.4. Usage Data and Analytics

We use third-party tools to understand how you navigate our application.

• PostHog: We use PostHog to track user behavior (e.g., clicks, page views) within the app interface to improve our services. We do not send Google user data, Facebook Lead Data, or Embeddable Form Respondent Data to PostHog.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Service Provision: To provide the functionality of , including aggregating Facebook leads, hosting your embeddable forms, writing form submissions to your Google Sheets, and sending conversions to Google Ads.
• Data Storage: To securely store the form submissions you collect via your website forms.
• Authentication: To verify your identity and allow you to connect your Google and Facebook accounts to .
• Connected Services: To act on your behalf in Google and Facebook when you use a connected feature, and to display the processing status of your Google Ads conversions.
• Improvement: To analyze user behavior to improve our application interface.

3. Google User Data and Limited Use

's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular, we:

• use Google user data only to provide or improve the user-facing features described in this policy;
• do not use Google user data for advertising, including serving or personalizing ads;
• do not sell Google user data, and do not transfer it to third parties except as described in Section 4;
• do not use Google user data to train generalized artificial intelligence or machine learning models;
• do not allow our personnel to read Google user data, except when necessary for security, to investigate abuse, to provide support you request, to comply with law, or with your consent.

3.1. Facebook Data Handling

We comply with the Facebook Platform Terms and Developer Policies.

• We do not sell, rent, or trade any data obtained via the Facebook API to third parties.
• We do not use the Facebook Lead Data you manage through our platform for our own advertising purposes.

4. Data Sharing and Third Parties

We do not sell or rent your personal information or the data you collect. We share information only in the following circumstances.

4.1. Google

• Google Sheets: Form submissions are written to the spreadsheet you select, using the Google account you connected.
• Google Ads: When you configure a conversion, we send it to Google Ads through the Data Manager API. Enhanced conversion data (such as email address, phone number, and name) is normalized and hashed before it leaves our servers.

4.2. Service Providers (Processors)

We use the following service providers to operate . They process data only on our behalf and under contract.

• Bacloud (UAB), United Kingdom: Hosting of our application servers and database, which store all data described in this policy, including Google user data.
• Cloudflare: DNS, caching, and security protection for our websites. Cloudflare may process network data, such as IP addresses and request data, as traffic passes through its network.
• BunnyCDN: Storage of encrypted, password-protected backups of our database, which are kept for 5 days. These backups are stored in the United Kingdom.
• PostHog: Analytics of interface usage only. As stated in Section 1.4, PostHog does not receive Google user data or form respondent data.

4.3. User-Directed Integrations

• If you choose to integrate with third-party tools (e.g., CRMs, email marketing tools, or automation platforms like Zapier), we will send the collected data to those services at your instruction. You are responsible for ensuring that your use of these third-party tools complies with applicable data privacy laws. Google user data is not sent to these tools.

4.4. Legal Compliance

• We may disclose information if required by law or in response to valid requests by public authorities.

5. Data Storage and Location

All data collected through , including Google user data, Facebook Lead Data, and Embeddable Form Data, is stored on servers located in the United Kingdom. Our database backups are also stored in the United Kingdom. The United Kingdom is covered by an EU adequacy decision under the GDPR.

6. Data Retention and Deletion

We retain your personal information and the data you import or collect only for as long as is necessary to provide our services to you.

• Google user data: We keep your name, email address, Google Sheets integration settings, Google Ads conversion records, and conversion status records until you request their deletion, or until you delete your account.
• Google access tokens: Your encrypted access and refresh tokens are kept until you request their deletion or delete your account.
• Backups: Encrypted backups of our database are kept for 5 days. When data is deleted, it is removed from our backups within 5 days.

How to Delete Your Data:

• Dashboard Deletion: You can delete connected Facebook and Google accounts, specific embeddable forms, and individual form submissions (leads) directly within our application dashboard at . Disconnecting a Google account in the dashboard does not by itself delete the data we have stored for it; to request that, use the account deletion option below.
• Revoking Google Access: You can revoke 's access to your Google account at any time from your Google Account permissions page. Revoking access stops our use of your Google account, but it does not delete the data we have already stored. To have that data deleted, request it as described below.
• Account Deletion: You may request the complete deletion of your account and all associated data (including all collected Respondent Data and Google user data) by contacting us at . We will process such requests within 30 days, and remove the data from our backups within a further 5 days.

Deleting a spreadsheet, or rows in it, in Google Sheets is done in Google and does not delete the data we have stored in .

7. Data Protection and Security

We use administrative, technical, and organizational measures to protect your personal information and the data you collect. In particular:

• Encryption of tokens: Google and Facebook access and refresh tokens are encrypted before they are stored.
• Encrypted backups: Database backups are encrypted and password-protected before they are stored off-site, and are kept for 5 days only.
• Secure transmission: Data is transmitted between your browser, our servers, and connected services over encrypted connections (HTTPS).
• Access restriction: Access to Google user data is limited to the features described in this policy and to authorized personnel who need it to operate or support the service.
• Data minimization: We request only the Google scopes needed for each feature, and we do not copy Google user data to analytics or other third-party tools.

However, no method of transmission over the Internet or method of electronic storage is 100% secure. If we learn of a security breach affecting your personal information, we will notify you and the relevant authorities as required by law.

8. GDPR Rights (EEA and UK Users)

Since we are a company based in Lithuania, we comply with the General Data Protection Regulation (GDPR) and the UK GDPR.

• As a User of : You have the right to access, correct, erase, restrict, object to, and export your personal data. You can also withdraw consent for a connected account at any time by revoking access in your Google or Facebook account settings.
• Regarding Your Respondents: If you collect data from EU citizens using our Embeddable Forms, you acknowledge your responsibility as a Data Controller to comply with GDPR regarding their data. We, as the Data Processor, provide the tools (deletion/export) to help you fulfill these obligations.

9. Contact Us

If you have questions about this Privacy Policy, please contact us at:

• Company Name:
• Email:
• Website: