Privacy Policy

1. Introduction

Welcome to Ferbix ("we", "our", or "us"). We operate the website ferbix.com and the Ferbix form-builder application (collectively, the "Service").

This Privacy Policy explains what information we collect, how we use it, and your rights regarding your personal data. By using our Service you agree to the practices described here.

2. Information We Collect

2.1 Information you provide directly

• Name and email address when you create an account
• Profile information you choose to add
• Content you create inside the Service (forms, responses, settings)

2.2 Information collected automatically

• Log data (IP address, browser type, pages visited, timestamps)
• Device information (operating system, screen resolution)
• Cookies and similar tracking technologies

2.3 Information from third parties

• If you sign in with Google, we receive your name, email address, and profile picture from Google in accordance with the permissions you grant.

3. How We Use Your Information

• To create and manage your account
• To provide, operate, and improve the Service
• To send transactional emails (e.g., email verification, password reset)
• To respond to your support requests
• To detect and prevent fraud or abuse
• To comply with legal obligations

We do not sell your personal data to third parties.

4. Google User Data

When you authenticate via Google OAuth, Ferbix requests access only to your basic profile information (name, email address, and profile picture). We use this data solely to:

• Create or log in to your Ferbix account
• Display your name and avatar inside the application

We do not request access to your Google Drive, Gmail, Calendar, or any other Google services. We do not share your Google user data with any third party.

Ferbix's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. Cookies

We use cookies and similar technologies to keep you signed in, remember your preferences, and analyse usage. You can disable cookies in your browser settings, but some parts of the Service may not function correctly without them.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data at any time by contacting us (see Section 10).

7. Data Security

We implement industry-standard security measures including encryption in transit (TLS) and at rest. Access to personal data is restricted to authorised personnel only. However, no method of transmission over the Internet is 100 % secure.

8. Third-Party Services

We use the following sub-processors that may handle your data:

• Supabase – database and authentication hosting
• Vercel – application hosting and edge network
• Google OAuth – optional sign-in provider

Each sub-processor is bound by their own privacy and security commitments.

9. Your Rights

Depending on your jurisdiction you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict certain processing
• Data portability

To exercise any of these rights, please contact us (see Section 10).

10. Contact Us

If you have questions about this Privacy Policy or your personal data, please contact us at:

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date above. Your continued use of the Service after any changes constitutes acceptance of the new policy.