Formevora

Legal

Privacy Policy

This policy explains how Formevora handles information across our website, administration service, and mobile application.

Effective and last updated: 13 August 2026

1. Scope and who we are

Formevora is an offline-capable operational forms and workflow service. This policy applies to formevora.com, Formevora administration interfaces, and the Formevora mobile app.

For customer workspace content, the organization that provides your Formevora account generally decides why the data is processed and acts as the data controller or equivalent. Formevora processes that content to provide the service. For website enquiries, service administration, security, and our direct communications, Formevora determines the processing purposes.

2. Information we handle

  • Identity and account data: name, work email address, password hash, verification state, workspace membership, role, and session/device name.
  • Organization data: workspace, project, team, location, form, assignment, workflow, settings, and directory information.
  • Operational content: answers submitted through forms and related reviews, revisions, approvals, comments, and audit history.
  • Evidence you choose or are instructed to provide: photos, documents, signatures, timestamps, and GPS coordinates. Camera, photo-library, and location access is used only when you invoke a relevant field and grant the device permission.
  • Technical data: authentication and refresh-session records, synchronization state, attachment metadata, integrity checksums, IP/security events, request logs, and diagnostic information.
  • Website enquiry data: name, work email, company, optional job title and phone, team size, and the operational process described in a demo request.

3. How we use information

  • Authenticate users and enforce workspace, role, project, and location access.
  • Deliver offline forms, synchronize work, store evidence, route reviews, and produce reports.
  • Send verification, invitation, service, and requested sales communications.
  • Protect accounts, investigate abuse, maintain auditability, diagnose failures, and improve service reliability.
  • Comply with applicable law, enforce our terms, and respond to valid legal requests.

Formevora does not sell personal data and does not use customer operational content for third-party advertising. Behavioral advertising and product analytics are not part of the current release.

4. Offline and device storage

The mobile app stores authorized forms, assignments, reference data, drafts, attachments, and synchronization operations locally so work can continue offline. This information remains on the device until it is synchronized, cleaned up by the application, removed through product controls, or the app's storage is cleared. Protect your device with an access code and notify your workspace administrator if it is lost.

5. Service providers and disclosure

We use infrastructure, database, object-storage, email-delivery, and security/operational service providers to run Formevora. They process information only to provide contracted services and are expected to protect it consistently with this policy. We may also disclose information when directed by the customer workspace, during a business transaction with appropriate safeguards, or when legally required. Platform support access is time-limited, reason-bound, and audited; customer submission content is not exposed to platform operators by default.

6. Retention

Beta workspace data is retained indefinitely by default. Workspace settings may define response and attachment retention periods, but operational records are normally archived rather than casually erased so published definitions, submissions, revisions, and audits remain trustworthy. Demo requests and security records are kept only as long as reasonably required for their purpose.

Deletion can be delayed or limited where records must be retained for legal obligations, fraud/security prevention, legal holds, relational integrity, unsynchronized devices, backup expiry, or the customer organization's legitimate operational recordkeeping. We will explain applicable retention when responding to a verified request.

7. Security and international processing

We use access controls, workspace isolation, encrypted transport, secure credential handling, expiring sessions, audit trails, and restricted attachment access. No system is completely secure. Service providers may process information in countries other than yours; where required, appropriate contractual or legal safeguards should be used.

8. Your choices and rights

Depending on your location, you may have rights to access, correct, export, restrict, object to, or delete personal data and to complain to a privacy authority. Workspace content requests may need to be handled with your organization because it controls the operational record.

Device permissions can be changed in iOS or Android settings. You may unsubscribe from optional marketing messages, but we may still send essential account or service notices. See Privacy Choices & Account Deletion to initiate a request.

9. Children

Formevora is a workplace service and is not directed to children. We do not knowingly offer accounts directly to children without an organization and any legally required authorization.

10. Changes and contact

We may update this policy as the service or legal requirements change. Material changes will be identified by the updated date and, when appropriate, communicated through the service.

Questions or privacy requests: admin@formevora.com.

When contacting us about workspace data, include your account email and workspace name, but do not send passwords, form answers, identity documents, or other sensitive operational content by email.