Effective: April 29, 2026

Privacy Policy

Formgen – Google Forms Testing & QA Automation Tool

1. Information We Access

To provide our services, Formgen accesses the following types of data:

Google Email Address: Used strictly to identify your account and verify your subscription level (Free vs. Pro).
Google Forms Structure: The App requires permission to read the structure of your forms (questions, titles, options) to generate appropriate test responses. This data is processed in-memory and never stored.
External Payment Verification (Gumroad): When you choose to upgrade to a Pro license, your email address is sent to our PCI-compliant payment processor, Gumroad, via a secure HTTPS request. This is necessary to create a license key, verify your purchase, and activate premium features. No Google form data is ever sent to Gumroad.

2. Data Protection Mechanisms for Sensitive Data

We implement the following technical and organisational measures to protect sensitive data (including your email address, form structure, and test responses):

                Encryption in Transit (TLS/SSL): All data exchanged between your browser, the App, and Google APIs is encrypted using industry-standard TLS 1.2/1.3. No sensitive data is ever transmitted over unencrypted channels.
Ephemeral (In-Memory) Processing: Your form questions and generated responses are processed only in temporary memory. They are never written to disk, database, or any persistent storage. Data is wiped immediately after each request.
Data Isolation with PropertiesService: Any configuration data (e.g., license keys) is stored inside your own Google Account using Google's PropertiesService. This data is not accessible to other users or the developer.
Secure Hosting Infrastructure: The App runs entirely on Google's Cloud infrastructure, benefiting from Google's physical, network, and application-level security controls (including firewalls, intrusion detection, and regular audits).
Strict Access Controls: Developer access to any user data is impossible by design because we do not operate any external database or logging system for your form content.

            

3. Data Sharing & Third‑Party Disclosure

Strict No‑Sharing Policy: We do not sell, trade, or share Google user data with any third parties for marketing or advertising purposes.

Gumroad (PCI‑Compliant Payment Processor): As described in Section 1, when you purchase a Pro license, your email address is sent to Gumroad via a secure external request. Gumroad is a Level 1 PCI DSS certified payment processor. Your email address and license key are stored on Gumroad's secure servers with strong encryption, access controls, and regular security audits. This is strictly necessary to verify your transaction and provide premium features.

With whom do we share Google user data? We do not share, transfer, or disclose your Google user data (form questions, responses, or any content from your Google Forms) to any third party. Your form data remains exclusively within your Google account environment.

4. Data Retention and Deletion

Google Form Data: Retained for zero minutes – processed ephemerally and never stored.
License & Settings: You can delete all locally stored settings at any time by revoking permissions via your Google Security Settings.
Purchase Records on Gumroad: To request deletion of your email address from our Gumroad sales records, email supportformgen@gmail.com. We will process within 7 business days.

5. Google API Limited Use Disclosure

Formgen's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Your Google user data is used exclusively to provide the core functionality of the App (generating test responses) and is never used for unauthorized purposes.

6. Contact Us

If you have any questions about this Privacy Policy or our data protection practices, please contact us:
Email: supportformgen@gmail.com