Privacy
Formtool keeps the forms you create, the contact details of the people you send them to (name, email) and the responses they enter, only to hand them over to you. You are responsible for the information your forms collect and for using it in compliance with applicable law (Quebec Law 25, PIPEDA).
Fill-in links expire after a few weeks. You can delete a send, its responses or a form at any time; deletion is permanent. Connections use HTTPS, and API keys and secrets are stored in a protected way.
Sign-in with Google or Facebook
If you sign in with Google or Facebook, that provider sends us only your name and email (and an account identifier on their side), after you authorize it. We use them only to sign you in or to link that sign-in method to your account: they are not sold, not used for advertising and not disclosed for other purposes. Nothing is published on your behalf.
Our use of information received from Google is limited to that purpose and follows the Google API Services “Limited Use” policy. You can unlink this account in your settings, remove access in your Google or Facebook account, and ask for your data to be deleted: see the data deletion instructions.
Responsibility: the firm is responsible for the information its clients enter. Formtool acts as a sub-processor and uses it only to provide the service.
Retention: after a file ends, responses are kept for the period chosen by the firm (5 years by default, adjustable; not a legal requirement, to be confirmed with its regulator), then destroyed automatically.
Your rights: you can ask the firm that had you fill in a form for access, correction, withdrawal of consent or deletion of your information. It must reply in writing within 30 days. Information subject to a retention obligation cannot be erased before its end date.
Questions: contact the operator of the service that gave you this access.
Service operator
Formtool is operated by:
- Legal name
- Exode Immigration Canada
- Person in charge of the protection of personal information
- Agnes Takoukam
- Contact e-mail of that person
- confidentialite@formtool.app
- Mailing address
- Terrebonne (Québec) J7M 2H8
- General e-mail
- info@formtool.app
Remedies
If you believe your personal information is not handled in accordance with the law, first contact the person in charge named above, then, if needed, file a complaint with the Commission d’accès à l’information du Québec (cai.gouv.qc.ca).
Roles and data processing
For the information that the account holder (professional or organization) collects from its clients or from the people who fill in its forms, the account holder is responsible; Formtool acts as a processor, on its instructions. For account and billing information, the operator named above is responsible. A data processing agreement is available on request.
Payments
Paid subscriptions are processed by Stripe. We do not keep your card numbers: Stripe only sends us the subscription status and a customer identifier.
Cookies
We only use cookies needed to operate the service: login session, protection against forged submissions and language memory. No advertising or third-party tracking cookies.
Hosting location
We choose providers that offer adequate safeguards; the hosting location is specified on request: write to confidentialite@formtool.app. Some providers (payment, email, Google or Facebook sign-in) may process information outside Québec.
Privacy incidents
If a privacy incident presents a risk of serious harm, we will promptly notify the Commission d’accès à l’information and the people concerned, and take reasonable measures to reduce the risk. Where an incident affects information for which an account holder is responsible, we notify that account holder without delay so that it can meet its own obligations. To report an incident, write to the person responsible named above.
Deleting your data
Instructions for having your data deleted, including if you signed in with Google or Facebook, are public: Data deletion · Contact us