How FormParcel handles your clients' leads
A short summary of how we protect data, what we do not claim, and how to tell us about a problem.
Summary
In plain language
- Encrypted in transit
- The website, the app and every form address use HTTPS.
- Protected when stored
- Lead content and the access that lets FormParcel write to your Sheet are encrypted before they are stored.
- Access is restricted
- Each workspace can see only its own sites, forms, leads and receipts. Our people look at customer data only when you ask for support, to investigate security or abuse, or when the law requires it.
- As little Google access as possible
- Signing in shares only your name, email address and profile picture. Access to Sheets covers only the spreadsheets FormParcel creates, not the rest of your Drive.
- Kept only as long as needed
- Lead content is deleted from FormParcel 7 days after the lead is accepted. A lead that could not be delivered is kept for up to 30 days so it can be recovered, then deleted.
- Your controls
- From the dashboard you can disconnect Google, delete a lead's content, or delete the whole account.
Not for
What FormParcel is not for
Do not use FormParcel to collect passwords, payment card numbers or other highly sensitive information, such as health or government ID details. The terms list what is not allowed.
Honest gaps
What we do not claim
- No SOC 2 or ISO 27001 certification, and no independent security audit yet.
- No published uptime commitment.
- No support for health or other regulated data.
No system is perfectly secure, and we do not claim otherwise.
Report a vulnerability
Email info@formparcel.live with what you found and how to reproduce it. The same contact is published in security.txt.
Please give us a reasonable time to fix a problem before you share it, and do not access other people's data or disrupt the service while you test.