Privacy Policy

Last updated: October 16, 2026

Information We Collect

• Account information: email address, login/session records, terms acceptance, security settings, and connected-app/API metadata.
• Form content: form titles, product details, prices, images, shipping settings, coupons, payment instructions, themes, and custom fields created by sellers.
• Order information: buyer-submitted names, emails, addresses, phone numbers, custom field answers, order items, payment proof images, notes, status history, tracking details, and edit requests.
• Donation reports: an optional supporter name, email, Telegram username, Discord username, selected donation method and asset, donor-reported amount, and transaction hash, Cash App reference, or Venmo reference.
• Optional Telegram connection: your Telegram chat ID, username and first name when available, the linked EZFormz account, connection timestamps, notification preferences, and delivery status or errors. We also store hashed connection codes with expiry and usage records.
• Operational data: IP address, user agent, request timing, error logs, audit events, email delivery events, backup access events, and abuse-report evidence snapshots.

How We Use Information

• Provide account login, form building, public order forms, order management, customer edit flows, and seller dashboards.
• Send transactional emails such as login codes, order confirmations, edit-request updates, invite access codes, transfer notices, and restock notifications.
• Deliver optional Telegram alerts for the notification types you enable.
• Run seller-enabled integrations including Google Sheets sync, EasyPost or Shippo shipping, API keys, OAuth, and MCP access.
• Maintain security, prevent abuse, investigate incidents, preserve evidence when abuse reports are filed, and comply with lawful requests.
• Identify and reconcile voluntary contributions reported through the Support EZFormz page. EZFormz does not process the underlying Cash App, Venmo, or wallet transfer.

Cookies And Local Storage

EZFormz uses cookies and browser storage for required product functions: login sessions, theme preference, form unlock or invite access sessions, passkey challenge state, and similar security or usability features. These are not ad-tracking cookies.

Third-Party Services

EZFormz uses infrastructure and service providers to operate the product, including Cloudflare Workers, D1, R2, and DNS; Resend, AhaSend, or SMTP2GO for email; Google Sheets when a seller connects a sheet; EasyPost or Shippo when a seller connects shipping; and Telegram when you connect Telegram notifications. These services process data only as needed for the relevant feature.

We use Cloudflare Turnstile to help prevent automated requests from sending unwanted sign-in emails. It checks browser and network signals in the background. See Cloudflare's Turnstile Privacy Addendum for how this verification data is processed.

Telegram Notifications

Telegram alerts are optional. To link a chat to your EZFormz account, open Account > Notifications, select Connect under Telegram DM, and open the connection link in Telegram. The connection code expires after 15 minutes. When you message or interact with the bot, Telegram sends us the message and interaction data needed to handle connection requests, commands, and notification buttons.

When a Telegram alert is enabled, EZFormz sends Telegram your chat ID and the notification content. Depending on the event, that content may include names, message text, form titles, product names and options, quantities, prices, order totals, and links to relevant EZFormz pages. Telegram processes and stores delivered messages under its Privacy Policy. Choose alert types with the content you want sent through Telegram in mind.

You can change Telegram alert preferences or disconnect the chat in Account > Notifications. Disconnecting disables the link for future alerts; it does not itself delete the stored linking records or messages already delivered to Telegram. EZFormz records remain subject to the retention and deletion practices below. Use Telegram's message and account controls for copies held there, and the support contact below for requests about data held by EZFormz.

Seller Responsibility

Sellers are responsible for the information they ask buyers to submit through their forms, for obtaining any required consents, and for honoring applicable privacy, retention, refund, and customer-service obligations. Sellers should not collect sensitive information they do not need.

Retention And Deletion

Account, form, order, image, audit, integration, and donor-reported contribution data is retained while needed to provide the service, reconcile support, preserve transaction history, satisfy seller settings, or comply with legal obligations. Sellers can configure account data deletion options where available. Some operational logs, abuse evidence, backup records, donation reconciliation records, or legally required records may be retained for a limited period after deletion requests.

Sharing And Disclosure

EZFormz does not sell personal information. Data may be shared with service providers that operate the product, with sellers and buyers involved in a transaction, or with authorities when required by law, safety, abuse investigation, or valid legal process.

Security

EZFormz uses HTTPS, HttpOnly session cookies, scoped API/OAuth credentials, server-side price verification, backup access controls, and provider-specific integration credentials. No online service can guarantee perfect security, so sellers should avoid collecting unnecessary sensitive data.

Requests

For privacy questions or account/data requests, submit a support ticket. Include the account email and enough context to locate the relevant forms or orders.