Privacy Policy

Last updated: November 2024

This Privacy Policy describes how FormShield (“we”, “us”, or “our”) collects, uses, and shares information when you use our spam detection API and related services (“Services”).

Information We Collect

Information You Provide

Account Information: When you create an account, we collect your email address, name, and billing information.
API Data: Data you submit through our API for spam detection, including email addresses, IP addresses, form content, and metadata.

Information We Collect Automatically

Usage Data: Information about how you use our Services, including API calls, timestamps, and response times.
Device Information: Browser type, operating system, and IP address when you access our dashboard.

How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve our Services
Process spam detection requests
Bill you for paid services
Send you technical notices and support messages
Respond to your comments and questions
Detect and prevent fraud and abuse
Improve our spam detection models

Data Processing for Spam Detection

When you submit data through our API:

Processing: We analyze the submission using IP intelligence, email validation, content analysis, and behavioral signals.
Hashing: Personal identifiers (emails, IPs) are hashed before long-term storage.
Retention: Raw submission content is not stored. We retain only aggregated signals and hashed identifiers needed to improve detection.
No Training on Content: We do not use the content of your submissions to train our models. Only metadata and spam/ham labels are used.

Data Retention

Account Data: Retained while your account is active and for a reasonable period afterward.
API Logs: Retained for 30 days for debugging and analytics purposes.
Hashed Identifiers: Retained indefinitely to maintain spam reputation databases.
Billing Records: Retained as required by law.

We do not sell your personal information. We may share information in the following circumstances:

Service Providers: With vendors who assist in providing our Services (hosting, payment processing, analytics).
Legal Requirements: When required by law, court order, or governmental authority.
Business Transfers: In connection with a merger, acquisition, or sale of assets.
Aggregated Data: We may share aggregated, anonymized statistics that do not identify you.

Security

We implement appropriate technical and organizational measures to protect your information, including:

Encryption in transit (TLS) and at rest
Regular security audits
Access controls and authentication
Monitoring for unauthorized access

International Data Transfers

We process data in the United States. If you are located outside the United States, your information will be transferred to and processed in the United States. We offer EU hosting for customers who require data residency.

Your Rights

Depending on your location, you may have rights regarding your personal information:

Access: Request a copy of the information we hold about you.
Correction: Request correction of inaccurate information.
Deletion: Request deletion of your account and associated data.
Portability: Request a copy of your data in a portable format.
Objection: Object to certain processing of your information.

To exercise these rights, contact us at privacy@formshield.dev.

For users in the European Economic Area:

We process data as a data processor on your behalf when you use our API.
We rely on legitimate interests and contract performance as legal bases for processing.
We offer a Data Processing Agreement (DPA) for enterprise customers.
EU hosting is available upon request.

CCPA Compliance

For California residents:

We do not sell personal information.
You have the right to know what information we collect and how it’s used.
You have the right to request deletion of your information.
You have the right to opt out of any future sale of your information.

Cookies

Our dashboard uses essential cookies for authentication and session management. We do not use tracking or advertising cookies.

Children’s Privacy

Our Services are not intended for children under 16. We do not knowingly collect information from children under 16.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on our website or sending you an email.

Contact Us

If you have questions about this Privacy Policy, please contact us at:

Email: privacy@formshield.dev

Data Protection Officer: dpo@formshield.dev

By using FormShield, you acknowledge that you have read and understood this Privacy Policy.