Privacy policy
Last updated: 2026-10-27
This policy covers the personal data of FormHaven account holders and visitors to formhaven.net. Messages that visitors send through a customer's form are processed on that customer's behalf; for those, the customer is the controller and our data processing agreement applies.
Who we are
TW Works, KvK 99463547. Contact for anything privacy-related: [email protected].
What we collect and why
| Data | Why | Legal basis |
|---|---|---|
| Name, email address, hashed password | To run your account and send you submissions | Contract |
| Billing details (handled by Stripe; we never see your card number) | To charge your plan and keep invoices | Contract, tax law |
| IP address and browser details in server logs | Security and abuse prevention | Legitimate interest |
| Messages you send us | Support | Contract |
We do not sell personal data, show ads or use tracking cookies. We only set the cookies needed to log you in and protect forms against forgery.
How long we keep it
- Account data: until you delete your account, then removed within 30 days.
- Invoices: 7 years, as Dutch tax law requires.
- Server logs: 14 days.
- Backups: overwritten on a rolling basis, at most 30 days.
Who processes it for us
See the subprocessor list. Data is stored in the EU.
Your rights
You can ask to see, correct, export or delete your data, and object to processing based on legitimate interest. Email [email protected] and we reply within 30 days. You can also delete your account yourself in Settings. If you are unhappy with our answer, you can complain to the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
Changes
We email account holders at least 30 days before a material change to this policy.