Privacy Policy

Who is responsible for your data

The controller of your personal data is App STR LLC, 30 N Gould St Ste N, Sheridan, WY 82801, USA. For any question about your data, write to contact@legalformshq.com.

Data we collect

As part of the service, we process:

• account data: name, email address, encrypted password;
• the information you enter in the documents you customize (for example addresses, dates, reference numbers);
• payment-related data, processed by our payment processor: no card data is stored on our servers;
• audience measurement and advertising performance data, collected only with your consent;
• technical connection data required for the security of the service (IP address, technical logs).

Why we process it

• Performance of the contract: providing the service (access to templates, customization, downloads), managing your account and your membership.
• Legal obligations: billing, accounting, responding to requests from competent authorities.
• Legitimate interest: service security, fraud prevention, product improvement.
• Consent: audience measurement and advertising, marketing emails. You can withdraw your consent at any time.

How long we keep it

Account data and customized documents are kept while the account is active, then deleted or anonymized within 3 years after the account is closed or after the last activity, subject to legal obligations. Billing data is kept as long as required by accounting and tax obligations. Technical logs are kept for a maximum of 12 months. Cookie consent records are kept for 6 months.

Service providers and hosting

Our service providers are:

• Vercel Inc.: application hosting and deployment;
• Supabase: database and document storage;
• our payment processor: payment processing;
• Resend: transactional email delivery;
• Google (Google Ads): advertising measurement, only with your consent.

We do not sell your data

We do not sell your personal information, and we do not share it with third parties for their own marketing purposes. Data is only shared with the service providers listed above, strictly to operate the service.

Your California privacy rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA, as amended by the CPRA) gives you the following rights:

• the right to know what personal information we collect, use and disclose about you;
• the right to request deletion of your personal information;
• the right to correct inaccurate personal information;
• the right to opt out of the sale or sharing of personal information: we do not sell or share personal information as defined by the CCPA;
• the right not to be discriminated against for exercising these rights.

To exercise any of these rights, email us at contact@legalformshq.com with the subject “Privacy request”. We will verify your identity and respond within 45 days as required by law. You may also designate an authorized agent to make a request on your behalf.

Your rights (all users)

Wherever you live, you can ask us to access, correct or delete the personal data we hold about you, and withdraw your consent at any time, by writing to contact@legalformshq.com. We answer within one month.

Cookies

The use of cookies and trackers, and how to manage your consent, are described in our cookie policy.