Security

We describe our security in plain language rather than hiding behind badges, and we would rather state what we actually do today than claim certifications, audits or uptime guarantees we have not completed.

This website

• This is a public marketing site. It has no user accounts, no database and no response collection.
• The free tools on this site run in your browser; the values you enter are not sent to us.
• Pages are served over HTTPS, and we keep the technology stack deliberately small.

Third-party services

The marketing site loads a small number of third-party scripts: Google Tag Manager for measuring site usage and Tawk.to for the live chat widget. These run in your browser and are governed by their own security and privacy practices. We keep the list short and review it as the site changes.

Payments

Subscription payments for the app are handled by Paddle, our payment provider, so card details are entered in Paddle's checkout rather than on this site. Paddle is responsible for storing and protecting that payment information. This marketing website does not take payment or store card details.

How we think about the product

• Collect only what a form genuinely needs, and let form owners mark fields as optional.
• Keep it clear who can see a response, and make that obvious to the form owner.
• Encrypt data in transit, and describe security in plain language instead of hiding behind a badge.
• Make it straightforward to request deletion of data you have sent through the product.

What we do not claim

We avoid statements about encryption at rest, compliance certifications, data residency or breach history until they are verified. When any of those are verifiable, they will appear here with sources rather than as marketing language.

Reporting an issue

Email hello@formixt.com with the details and the steps to reproduce, and we will look into it. Please give us a reasonable chance to investigate and fix a problem before disclosing it publicly, and avoid accessing, changing or deleting data that is not yours while testing.

See also our privacy policy and terms of use.