Privacy policy
Last updated: November 2, 2026
Formlume (“we”) is operated by Pratik Poddar, an individual developer. This policy covers the Formlume connector for Claude and ChatGPT and this website.
What we collect
- Your Google account email and ID, to identify your account and plan.
- A Google refresh token, stored encrypted (AES-256-GCM), so the connector can act on your forms when you ask it to.
- The ID, title, quiz flag and creation date of each form Formlume creates, to count your monthly free forms and list your forms.
- Connection records: the AI app's client registration and hashed access tokens.
- Billing: if you buy Pro, Dodo Payments processes payment; we receive your email, plan and subscription status, never card details.
What we don't collect
We don't store your form responses, question text, or chat conversations. Responses are read live from Google when you ask and summarized in memory. We don't access any Drive file Formlume didn't create.
Google user data
We request only openid, email and drive.file. Formlume's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We don't sell Google user data, use it for advertising, or use it to train AI models. Data passes to the AI app you connected (Claude or ChatGPT) only as tool results you request.
Sharing
We use these processors: Netlify (hosting), Supabase (database), Google (the APIs you authorize), Dodo Payments (billing). We share nothing else unless required by law.
Retention and deletion
Access tokens expire after an hour; refresh tokens after 90 days of no use. Disconnecting or revoking access at myaccount.google.com/permissions stops all access. Email us to delete your account and its records; we do so within 30 days. Forms in your Drive stay yours.
Security
All traffic uses HTTPS. Google tokens are encrypted at rest and never sent to the AI app.
Children
Formlume isn't directed at children under 13.
Contact
pratik.phodu@gmail.com