System upgrade notice: We are adding new features and performing maintenance. Some areas may be temporarily unavailable; we will inform you once the upgrade is complete.
Legal

Privacy Policy

Last updated: August 1, 2026

Effective date: August 1, 2026

FormFlow AI ('we', 'us', or 'our') is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully. By using the Service, you consent to the practices described here.

1. Information We Collect

Account Information. When you register, we collect your name, email address, company name, and password (hashed).

Payment Information. Payments are collected through direct Airwallex Payment Links. We do not store full payment-card details on our servers.

Usage Data. We collect information about how you use the Service, including form creation activity, token consumption, integration connections, and feature usage.

Form Data. We process the content of forms you create and submit through the Service. You are responsible for ensuring you have the right to submit this data.

Technical Data. We automatically collect IP address, browser type, device identifiers, operating system, and log data when you access the Service.

Communications. If you contact us, we retain records of that correspondence.

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service
  • Process payments and manage credit purchases through direct Airwallex Payment Links
  • Send transactional emails (receipts, invoices, account notifications)
  • Respond to customer support requests
  • Improve and develop new features
  • Detect and prevent fraud, abuse, and security incidents
  • Comply with legal obligations
  • Send marketing communications (with your consent, where required by law)

3. Payment Data & Airwallex

Payment transactions are processed through direct Airwallex Payment Links. When you make a payment, your financial information is transmitted through Airwallex's hosted payment-link flow. We do not receive or store your full card number, CVV, or bank account details. By using our payment features, you also agree to the applicable payment-service terms.

4. Sharing Your Information

We do not sell your personal data. We may share your information with:

Service Providers. Third-party vendors who assist us in operating the Service (e.g., cloud hosting, email delivery, analytics), bound by confidentiality obligations.

Payment Processor. Airwallex for payment processing through its Payment Links service.

Integration Partners. Third-party platforms you choose to connect (e.g., Salesforce, Slack), only with your authorization.

Legal Requirements. When required by law, court order, or governmental authority.

Business Transfers. In connection with a merger, acquisition, or sale of assets, with notice to you.

5. Data Retention

We retain your account data for as long as your account is active or as needed to provide the Service. After account deletion, we retain certain data for up to 90 days for backup and legal compliance purposes, after which it is permanently deleted. Payment records may be retained for up to 7 years as required by financial regulations.

6. Cookies & Tracking

We use cookies and similar tracking technologies to maintain sessions, remember preferences, and analyze usage. You can control cookies through your browser settings. Disabling cookies may affect some Service functionality. We use analytics tools to understand usage patterns; this data is aggregated and anonymized where possible.

7. Your Rights (GDPR / CCPA)

Depending on your location, you may have the following rights regarding your personal data:

Access: Request a copy of the personal data we hold about you. - Correction: Request correction of inaccurate data. - Deletion: Request deletion of your personal data (subject to legal retention requirements). - Portability: Request your data in a machine-readable format. - Objection / Restriction: Object to or restrict certain processing activities. - Opt-out of marketing: Unsubscribe from marketing emails at any time.

To exercise these rights, contact us at admin@altech.hk. We will respond within 30 days.

8. Data Security

We implement industry-standard security measures including TLS/SSL encryption in transit, AES-256 encryption at rest, role-based access controls, regular security audits, and intrusion detection systems. However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

9. International Data Transfers

Your data may be processed in countries other than your own. Where we transfer data from the EEA, UK, or Switzerland to other countries, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission.

10. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 18, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on the Service at least 14 days before the changes take effect. The "Last Updated" date at the top of this policy reflects the most recent revision.

12. Contact & Data Controller

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact our Data Protection contact:

FormFlow AI Email: admin@altech.hk Address: Flat 608 - 613, BLK C, 6/F, Cyberport 3, 100 Cyberport Road, Hong Kong

Related Legal Documents