Privacy Policy

Who handles your information

Yavqo Forms provides the form service. The person or organisation that creates a form decides what to ask, why to collect responses, who to contact, and how to use the answers. Contact that form creator about the purpose of their form or a decision on your submission.

Operator details awaiting completion: the legal operator name, business address, and privacy contact for Yavqo Forms have not yet been provided.

Information collected

• Account email and authentication information when you register or sign in.
• Form titles, descriptions, questions, settings, and the answers submitted by respondents.
• Submission and review dates, pending/accepted/declined decisions, and the original questions shown when a response was submitted.
• Source IP address and approximate city, region, and country when available. IP location may reflect a VPN, proxy, or mobile network; it is not an exact address.
• Technical request and email delivery information processed by our hosting and email providers.

Do not submit passwords or information that the form does not need. Any additional use by the form creator should be explained by them before collection.

How information is used

Information is used to operate accounts, display and manage forms, record and review submissions, produce form-owner analytics, show submission status, and send receipts or decision updates when the form creator enables them. Emails go to the first completed Email question. Yavqo Forms does not add respondents to a marketing list through these notifications.

Where data protection law requires a legal basis, it must be determined for the relevant purpose. Account operation may be necessary to provide the requested service; security and administration may rely on legitimate interests where appropriate. The form creator is responsible for identifying and explaining the basis for their collection and use of answers. The operator must confirm the bases applicable to its processing before this policy is finalised.

Who can access information

Form creators can view their own submissions, origin information, analytics, and CSV exports. Published questions can be viewed by anyone with the form link. A private submission-status link reveals only the form title, current decision, and submission/review dates. Anyone you share that link with can see those details; keep it private.

Supabase provides database and authentication services. Resend processes recipient email addresses and notification content. Hosting providers process requests and may supply IP geolocation; on Vercel the app uses its location headers. If configured on another host, IPinfo receives an IP address to estimate its location. The app does not send response answers to IPinfo. Providers may process information in other countries; applicable locations and transfer arrangements depend on the operator’s deployment and provider agreements.

Cookies and browser storage

Authentication cookies keep account holders signed in. Submission-status links contain a private access token. The status page uses that token to request status and does not display answers or IP information. The current app does not add advertising cookies or third-party behavioural analytics scripts.

Retention and deletion

Forms and responses remain stored until removed by the creator or service administrator; there is currently no automatic expiry for submissions. Deleting a form removes its submissions and their stored IP/location data from the active application database. A deleted submission’s status link stops working. Exported copies, recipient emails, provider logs, and backups may remain subject to their separate retention arrangements. The operator must confirm its retention schedule and provider backup periods.

Your choices and requests

Where applicable, you may request access, correction, deletion, restriction, portability, or object to processing. If processing relies on consent, you may withdraw it for future processing. Contact the form creator first for requests about answers or reviews; for account and service information use the operator’s privacy contact once provided. You may also complain to your relevant data protection authority. We may need information to verify that a request concerns your data.

Changes

This page will be updated when the service or its data practices change. The date above identifies the latest version.