Privacy Policy

Efren Jan Corpuz, an individual based in the United Arab Emirates and operating FamiForm, is the controller of personal information processed to provide the service. Privacy requests may be sent to support@famiform.com.

This policy applies globally to famiform.com, FamiForm accounts, workspaces, applications, and related support communications. The operator’s UAE location does not restrict where people may use FamiForm or reduce privacy rights provided by the laws that apply to them.

• Account information: email address, authentication records, confirmation status, and account identifiers.
• Workspace information: workspace name, roles, invitations, linked accounts, person-level grants, and member usage totals.
• Saved personal information: names, relationships, addresses, dates, identifiers, notes, custom labels and values, and other fields you choose to save.
• Documents: uploaded images or PDFs, file metadata, document type, recognized text, and fields reviewed and saved by a user.
• Billing information: Paddle customer, transaction, price, and subscription identifiers and status. FamiForm does not receive or store full payment-card numbers.
• Technical and support information: security logs, request details, device or browser information made available by infrastructure providers, support messages, and error details.

• Authenticate users and provide private workspaces.
• Store, organize, search, display, copy, export, and delete user-selected fields and documents.
• Recognize document text, suggest a matching person, and present results for review.
• Deliver invitations, expiry reminders, service messages, billing, and account support.
• Apply plan limits, process subscriptions, prevent abuse, investigate security incidents, and maintain reliability.
• Meet legal obligations and establish, exercise, or defend legal rights.

Depending on the context and applicable law, we rely on performance of our contract, your consent or instructions, legitimate interests in operating and securing FamiForm, and compliance with legal obligations.

A workspace may contain information about relatives, children, employees, or other people who do not have a FamiForm account. The account holder who adds that information is responsible for having an appropriate legal basis, permission, or authority to do so and for responding to that person’s requests.

Inviting a person to link an account does not automatically give them access to every workspace record. Workspace managers assign person-level permissions and separate source-file download permissions.

Free OCR: the default OCR process runs in your browser. The OCR engine does not need the document to be sent to an external OCR service. If you save the result, the selected source file and reviewed fields are stored with FamiForm’s infrastructure.

Optional AI enhancement: when you actively choose AI enhancement, the selected image or PDF and limited workspace person names are sent through FamiForm’s server to OpenAI for document recognition and matching. FamiForm requests that the response not be stored by the model provider, but the provider may process limited security and abuse-monitoring data under its applicable terms.

Recognition is optional and results are shown for human review before saving.

We disclose only the information reasonably needed for these providers to perform services for FamiForm:

• Supabase: authentication, database, and private file storage.
• Cloudflare: hosting, content delivery, network security, and request processing.
• Paddle: checkout, subscriptions, tax handling, transaction support, and billing records.
• OpenAI: optional AI-enhanced document recognition selected by the user.
• Resend: invitations, reminders, and service email when configured.

We may also disclose information when legally required, to protect users or the service, to investigate fraud or security issues, or as part of a business reorganization with appropriate confidentiality and data-protection safeguards. We do not sell personal information or use document contents for targeted advertising.

FamiForm serves users globally. FamiForm and its providers may process information in the United Arab Emirates, the United States, the European Economic Area, and other countries where they operate. Those countries may have different data-protection laws.

Where required, we use contractual, organizational, adequacy-based, consent-based, or other lawful safeguards for international transfers. Contact us if you want more information about safeguards relevant to your information.

We keep account and workspace information while needed to provide the service and meet legal, security, billing, and dispute obligations. Users can delete information sets and their attached private source files from the application. People can be deleted after their saved information has been removed.

Deleted information may remain temporarily in restricted backups, security records, transaction records, or provider systems before routine deletion or expiration. Paddle retains billing records according to its legal obligations and policies.

FamiForm uses measures designed to protect information, including encrypted transport, authenticated access, database row-level access controls, private object storage, short-lived source-file links, role-based sharing controls, and server-only secrets for privileged operations.

No system can guarantee absolute security. Use a unique password, protect your email account, review workspace membership regularly, and avoid storing information that is not needed.

Depending on applicable law, you may have rights to access, correct, receive, delete, restrict, or object to processing of personal information and to withdraw consent. You can exercise many rights directly by editing, exporting, or deleting information in FamiForm.

• EEA, United Kingdom, and similar jurisdictions: rights may include access, correction, erasure, restriction, objection, portability, withdrawal of consent, and a complaint to your supervisory authority.
• United States: depending on your state, rights may include knowing, accessing, correcting, or deleting information and opting out of certain sale, sharing, targeted advertising, or profiling. FamiForm does not sell personal information or share it for cross-context behavioral advertising.
• United Arab Emirates and other countries: you may exercise the data-subject rights available under the privacy law that applies to you.

For other requests, email support@famiform.com. We may need to verify your identity and authority, especially when a request concerns another person or a shared workspace. You may also have the right to complain to the data-protection authority that applies to you.

We will not discriminate against you for making a privacy request. Authorized agents may submit requests where permitted by law, subject to verification of their authority.

FamiForm accounts are for adults and are not directed to children. An authorized adult may store a child’s information for legitimate household purposes. Do not invite a child to create an account unless the use and consent comply with applicable law.

FamiForm uses essential browser storage and similar technologies for authentication, security, user preferences, and application operation. We do not currently use third-party advertising trackers. Paddle and other providers may use their own necessary technologies when you interact with their services.

We may update this policy as FamiForm, our providers, or applicable requirements change. We will update the effective date and provide additional notice for material changes where required.

Questions and privacy requests can be sent to support@famiform.com.