Privacy Policy

1. Information We Collect

• Account information: Name, email address, and password when you create an account.
• Billing information: Payment details are processed by Razorpay (for SaaS subscriptions) or AppSumo (for Lifetime Deal purchases). We do not store full card numbers on our servers.
• Form content: The form prompts, fields, conditions, and configuration you create on our platform.
• Form responses: Submissions collected through forms you publish. These belong to you — see Section 4.
• Usage data: Pages viewed, features used, browser type, IP address, device identifiers, and access timestamps.
• Communications: Messages you send to our support team.

2. How We Use Your Information

• Provide, operate, and improve the ContentFlash AI platform
• Process payments and manage your subscription
• Send transactional emails (receipts, password resets, service updates)
• Respond to support requests and troubleshoot issues
• Analyze aggregate usage patterns to improve the product
• Comply with legal obligations

We do not sell your personal information to third parties.

3. Third-Party Services

We use the following sub-processors to operate our service. Each is bound by a data processing agreement and handles data only as necessary to provide their service:

• OpenAI — Powers the AI form generation and response intelligence features. Form prompts and response data you submit for analysis are processed by OpenAI's API. OpenAI's data usage policy applies. We do not send your data to OpenAI for model training.
• Razorpay — Processes payments for SaaS subscriptions. Razorpay handles all card data under PCI-DSS compliance; we receive only a payment token and status.
• AppSumo — Processes Lifetime Deal purchases. AppSumo's privacy policy governs data collected during that transaction.
• Slack — If you enable the Slack integration, form response notifications are sent to the Slack channel you designate. No data is shared with Slack unless you explicitly connect your workspace.
• Zapier / Webhooks — If you configure a Zap or webhook, form response data is forwarded to the endpoint you specify. You control what data is sent.
• HubSpot — If you enable the HubSpot integration, form response data is written to your HubSpot CRM account. No data is shared with HubSpot without your explicit connection.
• Google — See Section 4 below for the Google Sheets integration.
• Google Analytics — We use Google Analytics 4 to measure aggregate website traffic. IP addresses are anonymized.

4. Google User Data (Google Sheets Integration)

When you connect a Google account to ContentFlash AI to send form responses to Google Sheets:

We access Google Sheets on your behalf via OAuth to write form responses to spreadsheets you designate. We do not read, modify, or store sheets outside of what you explicitly authorize. You can revoke access anytime via Google Account settings at myaccount.google.com/permissions.

• Scope: We request https://www.googleapis.com/auth/drive.file only — access limited to files ContentFlash AI creates or that you explicitly select. No access to other Drive files.
• Use: Solely to create a spreadsheet and append form submissions as rows. Not used for advertising or any unrelated purpose.
• Retention: We store an encrypted OAuth token only while the integration is connected. We do not store the contents of your spreadsheets on our servers.
• Deletion: Disconnect anytime from Settings → Integrations, which immediately deletes the stored token. Deleting your account also removes all associated Google tokens.
• Limited Use: Our use of Google API data adheres to the Google API Services User Data Policy, including Limited Use requirements.

5. Data Security

We use industry-standard measures including encryption in transit (TLS), encrypted storage for OAuth tokens, and access controls to protect your data. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

• Account data: Retained for the duration of your account. Deleted within 30 days of account closure upon request.
• Form responses: Retained while your account is active. You can delete individual responses or entire forms at any time from the dashboard.
• Billing records: Retained for 7 years as required by applicable financial regulations.
• Usage/analytics data: Retained in aggregate, anonymized form for up to 24 months.
• Google OAuth tokens: Deleted immediately upon disconnecting the integration or closing your account.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your account and associated personal data.
• Portability: Request export of your form data and responses in CSV or JSON format.
• Opt-out: Unsubscribe from marketing emails at any time via the unsubscribe link in any email.

To exercise these rights, email support@contentflashai.com. We respond within 30 days.

8. Children's Privacy

Our services are not directed to children under 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, contact us immediately.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by posting the updated policy on this page and, where appropriate, by email. Your continued use of our services after the effective date constitutes acceptance of the updated policy.

10. Contact Us

Questions or concerns about this Privacy Policy? Contact us at support@contentflashai.com.

ContentFlash AI · Bangalore, India