Privacy Policy
Last updated: March 2026
1. Who We Are
FormPop AI is operated by Optimum Real Estate Capital LLC, a company registered in the District of Columbia, United States. We provide an AI-powered form builder at formpop.ai. References to "FormPop AI," "we," "us," or "our" mean Optimum Real Estate Capital LLC. For privacy inquiries, contact us at support@formpop.ai.
2. Information We Collect
We collect information you provide directly: account registration data (name, email address, password), form data (the questions and settings you configure in your forms), and response data submitted through your forms by your respondents. We also automatically collect certain technical data when you use our service: IP address, browser type, device type, and pages visited. We use this data solely to operate and improve the service. We do not sell your data to third parties.
3. How We Use Your Information
We use your information to: provide and maintain the FormPop AI service; send transactional emails (account confirmation, password reset, form submission notifications); process payments through our payment processor; analyze usage patterns to improve product features; and comply with legal obligations. We do not use your form responses for AI training or any purpose beyond delivering the service to you.
4. Data Storage and Security
Your data is stored in a PostgreSQL database hosted by Supabase (Supabase, Inc.), with servers in the United States. Data is encrypted at rest using AES-256 and in transit using TLS 1.2 or higher. We use row-level security to ensure users can only access their own data. Integration credentials (such as webhook URLs or API keys for connected services) are additionally encrypted with AES-256 before being stored. We retain your data for as long as your account is active. If you delete your account, we will delete your data within 30 days, except where retention is required by law.
5. Third-Party Services
We use the following third-party services to operate FormPop AI:
- Supabase (database and authentication): stores your account data and form responses.
- Stripe (payment processing): handles subscription billing; we never store credit card numbers.
- Cloudflare (network security and CDN): routes traffic and provides DDoS protection.
- Anthropic (AI features): your form prompts are sent to Anthropic's API to generate forms and insights; Anthropic's privacy policy applies to this processing.
- Resend (transactional email): sends account-related emails on our behalf.
- Vercel (hosting): runs our application servers.
Each of these providers has its own privacy policy governing their data practices.
6. Cookies
We use minimal cookies, limited to those necessary for authentication (session tokens issued by Supabase). We do not use advertising cookies or third-party tracking cookies. You can disable cookies in your browser settings, but doing so will prevent you from logging in to FormPop AI.
7. Your Rights (GDPR)
If you are located in the European Economic Area or United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR): the right to access your personal data; the right to correct inaccurate data; the right to request deletion of your data ("right to be forgotten"); the right to restrict or object to processing; the right to data portability; and the right to withdraw consent at any time. To exercise any of these rights, contact us at support@formpop.ai. We will respond within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority.
8. Data Transfers
Our servers are located in the United States. If you access FormPop AI from outside the United States, your data will be transferred to and processed in the United States. We rely on standard contractual clauses and other appropriate safeguards for cross-border data transfers as required by applicable law.
9. Children's Privacy
FormPop AI is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice in the application. Your continued use of FormPop AI after changes are posted constitutes your acceptance of the updated policy.
11. Contact
For questions about this Privacy Policy or our data practices, contact us at: support@formpop.ai. Optimum Real Estate Capital LLC, Washington, D.C., United States.