Legal
Privacy Policy
How we handle your data and the data you collect through forms.
Last updated: July 3, 2026
Overview
This policy explains what data ZniForm collects, how we use it, and the choices you have. It is general information, not legal advice.
ZniForm helps creators and small businesses build forms, accept payments, and manage responses. Some of the data flowing through ZniForm belongs to form respondents and is collected by creators.
Data we collect
Account data: your name, email, and login credentials (via Google or magic link) when you sign up.
Respondent data: form answers, names, emails, phone numbers, and uploads that creators collect through their forms.
Payment data: amounts, transaction status, and references from payment partners. We do not store full card numbers — payments are processed by licensed partners.
Technical data: IP address, device type, and logs for security, abuse prevention, and reliability.
Wallet, Points & order data
Wallet & Points data: balance records and the Points ledger — including earnings from referrals, usage to cover the platform fee, and expiry — along with per-transaction platform fee records.
Order data: order details such as products and quantities, status, approval/rejection, shipping fees, and tracking numbers that you manage as the creator.
Buyer shipping data: for orders, we process the shipping address and contact details provided by the buyer so the creator can ship the order.
How we use data
To provide and operate the service: building forms, processing payments, sending notifications, and showing analytics.
For security and fraud prevention, to meet legal obligations, and to improve and develop features.
We do not sell your personal data or respondents' data.
Data sharing & third parties
We share data as needed with providers that operate the service on our behalf: payment processing (PayPal), WhatsApp delivery (KirimWA), email delivery (Resend), and cloud infrastructure (Cloudflare).
These providers only process data on our instructions and for the stated purposes. We may disclose data where required by law.
Storage & security
Data is stored on Cloudflare infrastructure with encryption in transit. Access is restricted and sensitive operations are logged.
No system is fully secure, but we apply reasonable technical and organizational measures to protect data.
Data retention
We retain data while your account is active and as long as needed to provide the service or meet legal, tax, and accounting obligations.
When you delete a form or close your account, related data is deleted or anonymized within a reasonable period, unless the law requires longer retention.
Your rights
You may access, correct, or delete your personal data, and request restriction of certain processing.
To exercise these rights, contact us through ZniForm's official support channels. Form respondents should contact the relevant form creator as the controller of their data.
The creator as data controller
For data collected through forms, the creator is the data controller and ZniForm acts as a processor. Creators are responsible for obtaining valid consent and displaying their own privacy notices where required.
Creators must use ZniForm in compliance with applicable law, including personal data protection rules.
Cookies & similar technologies
We use cookies necessary for login sessions and preferences (language, theme). We do not use third-party advertising cookies.
Changes to this policy
We may update this policy from time to time. We will notify you of important changes in the app or by email, and the 'last updated' date above will be adjusted.
Contact
Questions about privacy? Contact us through ZniForm's official support channels.