Privacy policy for Form to PDF

In short

• Form to PDF runs inside your Google Form, on Google's servers. The answers people give, the files they upload, the PDFs it makes and the emails it sends all stay in your Google account. They are never sent to us.
• It can only open the form you use it in, and the Drive files it makes or that you pick with it: your template, your folder and the PDFs. It cannot open the rest of your Drive, your other forms or your inbox.
• Emails to the people who fill in your form go out from your own Google account.
• To check whether you have paid, our licence service learns your Google account's email address and Google's ID for the account. It also receives four kinds of event, such as "PDF made", with no form content in them.
• Dodo Payments handles payment. We never see your card details.
• We do not sell data, show ads, or use your data to train AI models.

Who we are

Form to PDF is made and operated by Shubham, Ballia, Uttar Pradesh, India. In this policy "we" and "us" mean Shubham.

"You" means the form owner: the person who uses Form to PDF on their form. The people who fill in the form are called respondents.

For your form, its responses and the PDFs, you decide what is collected and why, and Google stores it. For the licence record described below, we are responsible.

What the add-on can access

When you first open Form to PDF, Google asks you to allow these permissions, shown here in Google's own words. Each one is used only for the job listed.

With these permissions, Form to PDF reads:

• the questions of the form you open it in, and, for each response, the answers, the time it was sent, the email address if your form collects them, the edit link, and the score if the form is a quiz;
• the template Doc and the folder you pick;
• the email address of your Google account.

It does not read your other forms, other files, your contacts or your emails.

Where form data is kept

Everything Form to PDF needs to run is stored in your Google account, in storage Google gives each add-on:

• With the form: your settings (which template and folder, the file name, the subfolder question, the email subject and message), and the Log. The Log records each response by Google's response ID and number, with its status, the time, the PDF's file ID, and a reason if it failed. It does not copy answers, names or email addresses. It also keeps the last response number given out and the date of the last failure email.
• With your Google account, shared by all your forms: how many PDFs you have made this month on the free plan, the licence service's last answer about whether you have paid, and the month and address of the last "free PDFs used up" email.

The PDFs, and the filled Docs if you choose to keep them, are saved in the Drive folder you picked. Responses stay where Google Forms keeps them. None of this is sent to us.

Emails the add-on sends

Form to PDF sends emails through your Google account, from your address, so replies come to you. They count towards your account's daily email limit set by Google.

• To respondents, at the email address your form collected or the email question you chose: the subject and message you wrote, with their PDF attached.
• To you: a copy of each of those emails if you tick Send me a copy; one email a day at most when PDFs could not be made; and one email a month at most when the free PDFs are used up.

These emails go straight from Google to the recipient. They do not pass through our servers.

What our licence service stores

The licence service is a small server run by us on Cloudflare, at choicelimit-api.moltinsta.com. It also serves our other add-on, Choice Limit. For Form to PDF it answers one question: has this Google account paid?

To ask, the add-on sends a sign-in token made by Google, which tells us your Google account's email address and Google's ID for the account. It asks when you open the side panel, when you press "I've paid: check again", and from time to time while PDFs are being made.

For everyone who uses Form to PDF, paid or not, the service keeps:

• the email address of your Google account and Google's ID for it;
• when it first saw your account and when the add-on last checked your plan;
• if you buy a licence, the name you gave at checkout.

If you buy a licence, it also keeps the purchase record: the order reference from Dodo Payments, the product, the date, the amount and currency, the email address on the order, and whether it was refunded or disputed.

The add-on also sends four kinds of event, so we can see whether Form to PDF works and where people get stuck: "pdf setup done", "pdf made", "pdf failed" with a short reason code (such as template missing or folder missing), and "pdf paywall shown". They are counted against a random ID we give your account, not your email address. They never contain form titles, questions, answers, file names or anyone's email address.

Nothing about your respondents ever reaches the licence service.

Payments

Purchases are handled by Dodo Payments, which acts as the merchant of record: it is the seller on your receipt, takes the payment and handles sales tax. You give your card or other payment details to Dodo, not to us, and Dodo uses them under its own privacy policy, which you can read on the Dodo Payments website.

When a payment succeeds or is refunded, Dodo tells our licence service, with the order reference, the amount and the email address and name on the order. We keep only the records described above. We never see your full card number.

Google user data and Limited Use

Form to PDF's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular, data Form to PDF gets from your Google account:

• is used only to run the add-on's features that you can see in the side panel and in its emails;
• is not sold, and is not used or transferred for advertising, credit checks or any purpose unrelated to those features;
• is not used to train artificial intelligence or machine learning models;
• is not read by a person, unless you ask us to look into a problem and agree to it, it is needed for security or to investigate abuse, or the law requires it.

Who we share data with

We do not sell or rent personal data. We use a few service providers to run the business, and they process data only on our behalf:

• Dodo Payments, for checkout, receipts, refunds and sales tax;
• Cloudflare, which hosts this website and the licence service;
• PostHog (servers in the United States), which counts visits to this website, the four add-on events, and completed purchases and refunds (plan and amount, with the same random ID, never your email address).

We may also disclose data if the law requires it. These providers may process data outside your country, under their own safeguards for international transfers.

This website

This website does not set cookies and does not use advertising scripts. We count visits with PostHog in a mode that stores nothing in your browser, sent through our own address (choicelimit-api.moltinsta.com/ph). We see which pages are viewed, and whether someone clicks to get the add-on, copy a template or try the example on the home page. PostHog also records how pages are used (scrolling, clicks and mouse movement), so we can see where they are confusing. Anything typed into a field is hidden in these recordings, including the example form on the home page, and we do not build a profile of you across visits. The add-on itself is never recorded. Our web host may keep short-lived server logs, such as IP addresses and pages requested, to keep the site secure.

How long we keep data

• Data stored with your form and your Google account stays there until you delete it, as described below. The Log keeps the latest 100 finished responses and drops older ones.
• PDFs stay in your Drive until you delete them.
• Your record in the licence service is kept while you use Form to PDF or hold a licence, and is deleted when you ask.
• Dodo Payments keeps its own records of the sale for as long as tax and accounting rules require.

Deleting your data

Data in your Google account. Press Turn off in Form to PDF to stop it on a form. You can remove its access at any time on your Google Account's Third-party apps and services page. Deleting a form deletes everything Form to PDF stored with it. Delete PDFs in Drive as you would any file.

Data we hold. Email shubhamvscode@gmail.com from your Google account and ask us to delete your data. We will delete your record within 30 days and tell you when it is done. After that, the add-on treats your account as being on the free plan. Records Dodo Payments must keep by law stay with Dodo.

If you filled in a form

The form belongs to its owner, and your answers and your PDF are stored in their Google account. We do not receive your answers, your PDF or your email address. To see, change or delete your response, contact the person who sent you the form. You can reply to the email that brought your PDF; the reply goes to them.

Form to PDF is a tool for form owners and is not directed at children. A school using it with students is responsible for doing so under its own rules.

Your rights

Depending on where you live, you may have the right to ask what personal data we hold about you, to have it corrected or deleted, to object to how we use it, and to complain to your data protection authority. To use any of these rights, email shubhamvscode@gmail.com. We will answer within 30 days. We are based in India.

Changes to this policy

If we change this policy, we will update it on this page and change the date at the top. If a change affects what Form to PDF can access or what we keep, we will say so here before it applies, and email people who have bought a licence.

Contact

Questions about privacy: shubhamvscode@gmail.com. Post: Shubham, Ballia, Uttar Pradesh, India.