--- title: "Formswrite - Privacy Policy" description: "Privacy policy for Formswrite" canonical: https://formswrite.com/privacy-policy last-updated: 2026-10-08 --- # Privacy Policy of Formswrite.com _Last Updated: October 12, 2026_ ## 1\. Collection of Personal Data Formswrite.com collects certain Personal Data from its Users. ## 2\. Owner and Data Controller Formswrite.com is owned and operated by Knight Security PTE. LTD., a company incorporated in Singapore. Any reference to "Formswrite.com", "Formswrite", "we", "us", or "our" within this Privacy Policy refers to Knight Security PTE. LTD. as the legal entity responsible for operating the Service. Contact Email: [dvir@formswrite.com](mailto:dvir@formswrite.com) ## 3\. Types of Data Collected The types of Personal Data collected by Formswrite.com, either directly or through third parties, include: - Basic user information: - Email address - First name - Last name - Google-related data: - Content from Google Drive that you choose to share with our service - Google Forms that we create on your behalf - Access permissions to manage Google Forms in your account - Service usage data: - Data communicated while using the service - Form creation and management activities - Service interaction logs Complete details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or through specific explanation texts displayed prior to Data collection. ## 3a. Google User Data When you grant Formswrite.com access to your Google account data, we handle this information with utmost care and transparency: - Access and Usage: - We access your Google Drive to read documents you specifically select for form creation - We create and manage Google Forms in your account based on your requests - We only process the minimum data necessary to provide our form creation service - We do not access or modify any other Google Drive contents beyond what you explicitly share - Data Storage: - The questions and answers we read from your document are saved as a conversion in your Formswrite library, so you can edit, export or share them later. They stay there until you delete the conversion or your account. - The uploaded source file is deleted from our servers when its conversion finishes or fails. A file left behind by an interrupted upload is removed by routine cleanup of temporary files. - Pictures from your document are stored on Cloudflare R2, as described in section 3c. - When you connect your Google account in the Formswrite web app, we store the Google access and refresh tokens you grant with your account, so Formswrite can create Google Forms and read the files you choose on your behalf. They are removed when you delete your account, and you can revoke them at any time in your Google Account settings. The Google Docs add-on does not store Google tokens (see section 3c). - We keep logs of conversion activity to run and improve the service. - Data Sharing: - We do not sell your Google user data - We do not use your Google data for advertising purposes - We do not combine Google user data with data from other sources, except to provide the features you use (for example, saving a conversion to your Formswrite library) - Your document content is processed by the AI providers named in section 3c (OpenAI and OpenRouter) only to perform the conversion. Requests through OpenRouter go only to model providers that do not store or train on prompts - Limited sharing only occurs in these cases: - When required by law or valid legal process - To protect our rights and property - With service providers who assist in operating our service, under strict confidentiality agreements - User Control: - You can revoke our access to your Google account at any time - You can request deletion of any data associated with your account - You can view and manage app permissions in your Google Account settings ## 3b. Data Protection Mechanisms and Processing We use these measures to protect your data: - Technical Measures: - All data sent between your browser, the add-on and Formswrite is encrypted in transit with HTTPS (TLS) - Files and pictures stored on Cloudflare R2 are encrypted at rest by the provider - Server access is limited to authorized staff and uses SSH keys - Automated monitoring and alerts for errors and unusual activity - Organizational Measures: - Access to personal data is limited to people who need it to run and support the service - We investigate and respond to security incidents and notify affected users where required by law - Data Processing: - Processing is limited to what is necessary to provide the service - Service activity is logged to keep the service running and secure - Data is kept as described in this policy and deleted when you delete it, delete your account or ask us to ## 3c. Formswrite for Google Docs (Google Workspace add-on) The Formswrite add-on for Google Docs turns the document you have open into the quiz format you choose: a Google Form, a Formswrite form, or a file for another platform such as Canvas, Moodle or Kahoot. It asks Google for these permissions and uses each one only as described: - **Your email address and basic profile** (openid, userinfo.email, userinfo.profile): to sign you in to your Formswrite account. - **The document you have open** (documents.currentonly): to read the text and pictures of that one document, only when you click Convert. The add-on cannot open your other documents. - **Google Forms** (forms.body): to create a new Google Form in your Google Drive and add your questions, answer choices and answer key to it, only when you choose Google Forms. - **Files the add-on creates** (drive.file): to save exported quiz files (for example a Canvas or Moodle file) in a "Formswrite exports" folder that the add-on creates in your Google Drive. With this permission the add-on can only see files it created; it cannot read or change your other Drive files. - **Connecting to an external service** (script.external\_request): to send the document to Formswrite at api.formswrite.com and to save exported files through the Google Drive API. - **Showing the sidebar** (script.container.ui): to display the Formswrite sidebar inside Google Docs. What the add-on stores: - The text and pictures of the document you convert are sent to Formswrite and kept with the conversion in your Formswrite library, so you can open it again, edit it and export it to other formats. - Pictures from your document are stored as image files on our cloud storage provider (Cloudflare R2) so they can appear in your form and in exported files. Deleting a conversion removes it from your library, but the stored picture files are not deleted automatically; email [support@formswrite.com](mailto:support@formswrite.com) and we will delete them. - To read your document and find the questions, its content is processed by the AI model providers we use as service providers (OpenAI and OpenRouter), through their APIs, only to provide the conversion. OpenRouter passes a request only to model providers (such as OpenAI and Anthropic) that do not store or train on prompts, and OpenAI does not train on data sent through its API. - Inside Google, the add-on keeps your Formswrite sign-in session, your last chosen format, the ID of the "Formswrite exports" folder and a short list of your recent exports in your Apps Script user properties, which only your Google account can access. - When you create a Google Form, the add-on sends Formswrite a short-lived Google access token for that request only. Formswrite uses it to create the form and does not store it. Formswrite's use and transfer of information received from Google APIs to any other app will adhere to [Google API Services User Data Policy](https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements. In particular: - We use Google user data only to provide and improve the features you use in Formswrite. - We do not use Google user data for advertising, and we do not sell it. - We do not transfer Google user data to others except as needed to provide the service (such as the providers above), to comply with law, or as part of a merger or acquisition. - People at Formswrite do not read your Google user data unless you ask us to (for example in a support request), it is needed for security purposes, or it is required by law. - We do not use Google user data to develop, improve or train generalized AI or machine learning models. To delete your data, delete a conversion from your Formswrite library, delete your Formswrite account in your account settings, or email [support@formswrite.com](mailto:support@formswrite.com). To stop the add-on's access, remove Formswrite on your Google Account's [third-party connections page](https://myaccount.google.com/connections); you can also sign out from the sidebar, which clears the session stored in Apps Script. ## 4\. Mandatory Data Unless specified otherwise, all Data requested by Formswrite.com is mandatory. Failure to provide this Data may make it impossible for Formswrite.com to provide its services. In cases where Formswrite.com specifically states that some Data is not mandatory, Users are free not to communicate this Data without consequences to the availability or functioning of the Service. ## 5\. Cookies and Tracking Tools Formswrite.com may use cookies or other tracking tools for providing the Service required by the User, in addition to other purposes described in the present document and in the Cookie Policy, if available. ## 6\. Processing of Data Data processing is carried out using computers and/or IT-enabled tools, following organizational procedures and modes strictly related to the purposes indicated. The Data may be accessible to certain types of persons in charge, involved with the operation of Formswrite.com, or external parties appointed as Data Processors by the Owner. ## 7\. Legal Basis of Processing The Owner may process Personal Data relating to Users based on various legal bases, including consent, performance of an agreement, compliance with legal obligations, public interest, or legitimate interests pursued by the Owner or a third party. ## 8\. Place of Processing Data is processed at the Owner's operating offices and in any other places where the parties involved in the processing are located. Data transfers may involve transferring Data to a country other than the User's own. ## 9\. Retention Time Personal Data is processed and stored for as long as required by the purpose for which it was collected. The Owner may retain Personal Data for a longer period if consent is given or when required by law. ## 10\. Purposes of Processing Personal Data is collected for purposes such as providing the Service, complying with legal obligations, responding to enforcement requests, protecting rights and interests, and detecting malicious or fraudulent activity. ## 11\. Rights of Users Users have various rights regarding their Data, including the right to withdraw consent, object to processing, access, rectify, restrict processing, request erasure, and receive Data in a portable format. Users can also lodge complaints with their competent data protection authority. ## 12\. Handling “Do Not Track” Requests Formswrite.com does not support “Do Not Track” requests. Users should review the privacy policies of third-party services used by Formswrite.com to determine if they honor “Do Not Track” requests. ## 13\. Changes to the Privacy Policy The Owner reserves the right to make changes to this privacy policy at any time by notifying Users on this page. It is recommended to check this page often for updates. ## 14\. Definitions and Legal References This section provides definitions and legal references for terms used in the privacy policy.