Privacy Policy

This Privacy Policy explains how OptiRank Studio ("OptiRank Studio", "we", "us") collects, uses and protects your information when you use FormMaker (the "Service"). We comply with India's Digital Personal Data Protection Act 2023 (DPDPA) and GDPR for EU users.

1. Data we collect

We collect the following categories of data:

• Account data. When you register, we collect your name, email address and, if you sign in with Google, your basic profile information.
• Form & submission data. The forms you build and the responses your respondents submit. As a respondent, the data you submit is controlled by the form's creator.
• Billing data. If you subscribe to a paid plan, payment is processed by Stripe; we store limited billing metadata but never your full card number.
• Usage & device data. Basic analytics such as pages visited, browser type and IP address, used to keep the Service secure and improve it.

2. How we use your data

We use your data to:

• Provide, maintain and improve the Service.
• Authenticate you and secure your account.
• Process payments and manage subscriptions.
• Send service-related communications and, with consent, product updates.
• Detect, prevent and address fraud or abuse.

We do not sell your personal data, and we never use the contents of your form submissions for advertising.

3. Legal bases for processing

We process personal data on the bases of contract (to provide the Service you sign up for), legitimate interests (to secure and improve the Service), consent (for optional communications) and legal obligation (for example, tax records).

4. Data retention

We keep account and form data for as long as your account is active. When you delete a submission, form or your account, we permanently remove the associated data within 30 days, except where we are required to retain certain records by law.

5. Your rights (DPDPA & GDPR)

Under India's DPDPA 2023, you have the right to access, correct and erase your data, and to grievance redressal. If you are in the EU/EEA, you also have the rights to restrict and port your data and to object to certain processing. You can exercise these rights at any time — see our GDPR & DPDPA page for details. You also have the right to lodge a complaint with your local supervisory authority or the Data Protection Board of India.

Data Protection Officer: privacy@optirankstudio.com

6. Cookies

We use essential cookies to operate the Service and limited analytics cookies to understand usage. You can manage your preferences as described in our Cookie Policy.

7. Third-party services

We rely on a small set of trusted sub-processors to run the Service, including Stripe (payments), AWS (hosting & storage), Resend (email) and Vercel (application hosting). Each is contractually bound to protect your data. A full list is available on our GDPR page.

8. Data security

Data is hosted on servers in India and EU regions. All data is encrypted in transit and at rest, and protected by access controls and audit logging. While no system is perfectly secure, we follow industry best practices to safeguard your information.

9. International data transfers

We are based in India. By using FormMaker, you consent to the transfer of your data to India and processing in accordance with this Privacy Policy, DPDPA 2023 (India), and GDPR (for EU users).

10. Changes to this policy

We may update this policy from time to time. When we make material changes, we will notify you by email or through the Service and update the "Last updated" date above.

11. Contact us

For any privacy questions or to reach our Data Protection Officer, email privacy@optirankstudio.com.