Privacy Policy
FormProof is operated by OMASSENO LLC, a Texas limited liability company. Contact: support@getformproof.com.
What we collect and why
- Your email address, for your account, sign-in codes and results. Kept until you delete your account.
- Authorization record: your name, role, business name, website, the terms version you signed, time, IP address and browser user agent, as evidence the site owner authorized testing.
- HubSpot connection: account ID, hub domain, the approving user, granted permissions and tokens. Tokens are encrypted (AES-GCM); deleted when you disconnect.
- Page address and form ID you choose, and check records (test ID, test email address, timings, results, the HubSpot ID of the test contact, cleanup result).
- Invite requests: the email, name, company, website and note you send, to review your request. Deleted on request.
- Feedback you send through the feedback form, linked to your account if you're signed in.
- Page counts: a daily total of visits per public page. No cookie, IP address or browser details are stored with it.
- IP addresses in short-lived rate-limit counters that protect sign-in, invite requests and feedback; not linked to your account.
What we read in HubSpot
Your form's fields and settings, its recent submissions (to find our test), and contacts searched by the test email address only. We do not read, export or store your other contacts or submissions, and we delete only the test contacts FormProof created.
What we don't do
No analytics or advertising trackers, no third-party cookies, no selling of data. During the beta no payment details are collected.
Cookies
fp_session keeps you signed in (14 days); fp_url remembers the page you're checking during sign-up (1 day). Both are strictly necessary.
Service providers
Cloudflare, Inc. (hosting, database, scheduled jobs, email sending); HubSpot, Inc. (your CRM, accessed only with the permissions you grant).
Your choices
Disconnect HubSpot any time in Settings (we revoke our refresh token and delete stored tokens), or delete your account, which permanently deletes your account, authorization record, form settings, connection, checks and reports; we keep only a one-way hash of your email address and the deletion date. For access or correction requests, email us; we answer within 30 days.
Changes
We will email account holders before material changes take effect.