DPDPA & GDPR
Your data rights under DPDPA & GDPR
FormMaker is built privacy-first. Below is a plain-language overview of your rights, how to exercise them, and how we process your data.
India DPDPA Compliance
As a company built in India, FormMaker complies with India's Digital Personal Data Protection Act 2023 (DPDPA), which governs how the personal data of individuals in India is collected, processed and protected. We process personal data lawfully, only for the purposes you consent to, and we give you clear control over your information.
For Indian users, your rights under DPDPA 2023 include: the right to access, the right to correction, the right to erasure, and the right to grievance redressal. To exercise any of these, contact our Data Protection Officer at privacy@optirankstudio.com.
GDPR rights for EU users
If you are in the EU/EEA, the General Data Protection Regulation (GDPR) gives you the following rights:
Right to access
Request a copy of the personal data we hold about you.
Right to rectification
Ask us to correct inaccurate or incomplete information.
Right to erasure
Request that we delete your personal data (the “right to be forgotten”).
Right to portability
Receive your data in a structured, machine-readable format.
Right to restriction
Ask us to limit how we process your data in certain cases.
Right to object
Object to processing based on our legitimate interests.
How to exercise your rights
To exercise any of the rights above, email our Data Protection Officer at privacy@optirankstudio.com. We will respond within 30 days. Account holders can also export and delete their data directly from the dashboard at any time.
Data processing overview
As a data processor, FormMaker processes form submissions on behalf of the form creators who act as data controllers. As a data controller for account information, we process the minimum data needed to operate the Service. All submission data is encrypted at rest and hosted on servers in India and EU regions. We offer a Data Processing Agreement (DPA) to all customers on request.
Sub-processors
We work with a small number of trusted sub-processors, each bound by data protection obligations:
| Sub-processor | Purpose |
|---|---|
| Stripe | Payment processing |
| AWS | Hosting & file storage (India & EU regions) |
| Resend | Transactional email delivery |
| Vercel | Application hosting & CDN |
Cookies
For details on the cookies we use and how to manage them, see our Cookie Policy.