Your privacy, in plain words

OG Forms is run by Harish Kumar, an individual based in India. In this policy, "we" and "us" mean Harish and OG Forms. Harish decides how your data is used, so he is responsible for it under privacy law, where this role is called the data controller or data fiduciary.

OG Forms is new and is not open to everyone yet. This policy covers this website (ogforms.app) and the OG Forms app.

This website only collects what you type into it yourself:

• When you join the waitlist, we keep your email address, the page you joined from, and the time you joined.
• When you send a message from the contact page, we keep your name, your email address, what the message is about, the message itself, and the time you sent it.

This website does not use analytics, ad trackers, or cookies, and it does not store anything in your browser. Cloudflare, which hosts the site, handles technical details like your IP address so it can deliver pages to you and block attacks.

When you have an OG Forms account, we keep:

• Your name, email address, and profile picture, which Google shares with us when you sign in with Google. We never see or store your Google password.
• Your forms, your settings, your workspace, and the teammates you invite.
• Your sign-in sessions, including the IP address and browser each one came from, so we can keep your account secure.
• Any files you upload.

When someone answers a form made with OG Forms, we keep:

• Their answers, and their email address only if the form asks for it.
• Any files they upload to the form.
• A scrambled code made from their IP address, which we use to stop spam and duplicate answers. We never store the IP address itself.
• A short label for their device, like "iPhone, Safari", and how long they spent on the form.

To block spam, Cloudflare's spam check may look at the visitor's browser when they submit a form. The person who made the form owns these answers, so if you answered a form and want your answers changed or deleted, please contact that person first. We are happy to help them do it.

Paid plans and AI features are not live yet. When paid plans launch, a payment company will handle your card details, and we will never see your full card number. When AI features launch, the text you ask AI to work on will be sent to an AI provider so it can give you a result. We will name both of these companies on this page before either feature goes live.

We use your data only to run and improve OG Forms:

• To sign you in, save your forms, and collect your answers.
• To send the emails you ask for, like a teammate invite.
• To reply to your messages, and to tell the waitlist when OG Forms opens.
• To block spam and abuse, and to keep everyone’s data safe.

We do not sell your data, we do not share it for advertising, and we do not use it to show you ads.

A few trusted companies handle data for us, only so OG Forms can work:

• Cloudflare hosts the website and the app, stores your forms, answers, and files, and runs the spam check.
• Google lets you sign in with your Google account.
• Resend sends our system emails, like teammate invites.

We will only share data with anyone else if the law requires it, for example a valid court order, or if you ask us to.

Your data is stored on Cloudflare's network, which runs in many countries. This means your data may be handled outside the country you live in, including in India and the United States, and we rely on Cloudflare's safeguards when that happens.

• Waitlist emails are kept until OG Forms opens and we have told you, and after that until you ask us to remove yours.
• Contact messages are kept for up to two years, so we can follow up, and then deleted.
• Your account data is kept for as long as your account is open.
• Answers are kept until the person who owns the form deletes them, or deletes their account.
• Anything you delete in the app sits in the trash for 7 days, so you can bring it back, and is then removed for good.
• Backup copies can last up to 30 more days before they are cleared.

Wherever you live, you can ask us to:

• Show you the data we have about you.
• Correct anything that is wrong.
• Delete your data, or your whole account.
• Give you a copy of your data that you can take elsewhere.
• Stop using your data for something you no longer agree to.

These rights come from laws like the GDPR in Europe and the UK, the CCPA in California, and the Digital Personal Data Protection Act in India. We answer every request within 30 days, and we may ask you to confirm who you are first, so nobody else can get your data. If you are not happy with our answer, you can also complain to the data protection authority where you live.

This website sets no cookies at all. The app uses one essential cookie that keeps you signed in, and it does not work without it. We do not use advertising or tracking cookies anywhere.

Every connection uses HTTPS, every workspace is kept apart from the others, and every request checks that you have the right to see what you asked for. No system is perfect, so if we ever have a breach that puts your data at risk, we will tell you and the right authorities as the law requires.

OG Forms accounts are for people aged 18 or over. If you make a form that children will answer, it is your job to get permission from their parents or guardians first, as the law where you live requires.

When we change this policy, we will update the date at the top of this page. If a change matters, for example a new company that handles your data, we will also email account holders before it takes effect.

For any privacy question or request, including a complaint, write to Harish Kumar through the contact page and pick "A privacy request". Harish handles every privacy request himself, and acts as the grievance officer under Indian law.