Forms Bridge (forms-bridge.com) connects Webflow forms to Google Sheets. This policy explains what personal data Forms Bridge handles, why, and what your rights are. It covers two groups of people: developers who sign up and use Forms Bridge, and their clients who connect their Google account through a setup link.
Who we are
Forms Bridge is operated by [full name], sole proprietor (egyéni vállalkozó), [registered address], Hungary. Tax number: [tax number]. EU VAT number: [EU VAT number]. Contact: [email address].
We are the data controller for the data described below.
The short version
- We never receive your form submissions. Webflow sends each submission straight to a script in your client's own Google account, which writes it into their own spreadsheet. The submissions don't pass through our servers.
- The spreadsheet and the script belong to the client. We don't keep a copy of the sheet's contents.
- We store only what we need to run the service: your account, your projects' settings, and your purchases.
What we collect and why
Developer accounts. Your name, email address and sign-in details, handled by our sign-in provider (Clerk). We use them to create and secure your account, and to contact you about it.
Google Sheets access (developers, optional). If you connect Google Sheets, we store the email of the Google account you connected and a long-lived access token, encrypted. We use it only to read and edit your clients' Forms tab and column headings when you ask us to (for example, when you add or remove a form).
Projects. For each project: its name, your client's name (optional) and Google email, the Webflow form names, an optional Webflow site ID, and the details of the client's spreadsheet and script (their IDs, title and address) and the script's webhook key. We use them to guide your client through setup and to show you their progress.
Client setup (clients). When a client opens a setup link and signs in with Google, we receive their Google email and a short-lived access token. The token is kept only in an encrypted cookie in their browser for the setup session. We use it to create the spreadsheet, tabs and script in the client's own Google account, to share the spreadsheet with their developer, and to check the script is approved. We don't store the client's Google password or the token.
Purchases and invoices. Card payments are handled by Stripe; we never see or store card numbers. We store each purchase (plan, amount, status, date) and the billing details entered at checkout (name, company name, address, tax number, invoice email), and we send these to our invoicing service (Billingo) to issue the legally required invoice.
Codes and partners. If you redeem a code, we record which code and when. If you arrive through a partner's link, a cookie remembers that partner for 60 days, and your account is linked to them so we can pay their commission.
Technical logs. Our hosting provider (Cloudflare) processes IP addresses and request logs to deliver the site and protect it from abuse.
Legal basis
We process account, project and setup data to provide the service you signed up for (performance of a contract), invoice data to meet our legal obligations (accounting and tax law), and logs and partner tracking on the basis of our legitimate interest in running, securing and growing the service.
Google user data
Forms Bridge's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google data only to provide the features described above. We don't sell it, use it for advertising, or let humans read it, except with your permission, for security, or where the law requires.
Who we share data with
We use these service providers, each only for its part of the service:
- Clerk – developer sign-in and accounts.
- Cloudflare – hosting and our database (stored in the EU).
- Stripe – card payments.
- Billingo – invoices (Hungary).
- Google – the Google Sheets and Apps Script features, in your or your client's own Google account.
Some of these providers are based in the United States; transfers rely on the EU–US Data Privacy Framework or the EU's standard contractual clauses. We don't sell personal data.
How long we keep it
- Account and project data: as long as your account exists. Deleting a project removes it from Forms Bridge; deleting your account removes your data within [30] days.
- Invoices and purchase records: for the period required by Hungarian accounting law (8 years).
- Client setup sessions: until the client signs out or the session expires.
- Logs: for a short period set by our hosting provider.
Cookies
We use only the cookies the site needs to work: the sign-in session, the client's setup session, and the partner referral cookie (60 days) when you arrive through a partner's link. We don't use advertising or analytics cookies.
Your rights
You can ask us for a copy of your data, to correct or delete it, to restrict or object to its processing, and to receive it in a portable format. Write to [email address]. You can also revoke Forms Bridge's access to your Google account at any time in your Google account's security settings.
If you think we've handled your data wrongly, you can complain to the Hungarian data protection authority (Nemzeti Adatvédelmi és Információszabadság Hatóság, naih.hu) or the authority where you live.
Changes
If we change this policy, we'll update the date at the top, and tell you by email about any important change.
Contact
[full name] · [email address] · [registered address]