Legal
Privacy Policy
Last updated: June 2026
BoostByte Forms is operated by F.I.T.S. (Forged Innovative Technology Solutions). This policy explains what personal data we collect, why we collect it, and how we protect it.
1. What we collect
Account data: When you register we collect your name, email address, and a securely hashed password. You may optionally upload a profile avatar. We also record your timezone and a last-login timestamp.
Survey data: Survey titles, descriptions, questions, and response submissions created or received through the platform — including files respondents upload when a survey includes a file-upload question.
Donation records: If you make a voluntary donation we store your name, email address, donation amount, currency, and transaction status. No payment card details are ever stored on our servers — all payment processing is handled by WiPay Financial on their PCI-compliant platform.
Usage data: With your consent, we collect anonymised page-view and interaction statistics via Google Analytics. This helps us understand how the platform is used and prioritise improvements.
Technical data: IP addresses (for rate limiting and fraud prevention), browser type, and session identifiers. These are not sold or shared.
Browser storage: With your consent, preference cookies and localStorage may store UI choices. The survey builder may also keep an unsaved draft in your browser until you save or clear it — that draft stays on your device and is not sent to our servers automatically.
2. How we use your data
- To provide and maintain the platform and your account.
- To send transactional emails: email verification, password resets, organisation invitations, and donation receipts.
- To prevent abuse, fraud, and protect the security of all users.
- To power optional AI features you request: survey drafts, response summaries, and the in-app help assistant.
- To analyse aggregate usage patterns (with consent) and improve platform features.
- To process voluntary donations via WiPay Financial.
3. Third-party services
| Service | Purpose | Consent required |
|---|---|---|
| WiPay Financial | Payment processing for donations | When donating |
| Google Analytics | Anonymous usage statistics | Analytics cookie consent |
| OpenAI | AI survey drafts, response summaries, and help-assistant replies | When you use those features |
| Laravel Cloud | Application hosting and infrastructure | Required to run the service |
| Laravel Nightwatch | Production error and performance monitoring | Required for reliability |
| Wasabi / S3 | Profile images, organisation branding, survey headers, and respondent file uploads | Required for uploads |
We do not sell, rent, or share your personal data with any third party for commercial purposes.
4. Data retention
Account data is retained for as long as your account is active. You may delete your account at any time from Account Settings. Deleted accounts are soft-deleted immediately and may be retained in backups or administrative records for a limited period before permanent removal. Survey and organization data you created may remain available to other active members of those workspaces. Donation records are retained for a minimum of 7 years to comply with financial record-keeping obligations. Anonymised analytics data may be retained indefinitely.
5. Security
All data is transmitted over HTTPS/TLS. Sessions are server-side encrypted. Passwords are hashed using bcrypt and never stored in plain text. CSRF tokens protect every form submission. We perform regular security reviews of the codebase.
6. Your rights
- Access the personal data we hold about you.
- Correct inaccurate data via Account Settings.
- Delete your account and associated personal data.
- Withdraw analytics consent at any time via the cookie settings at the bottom of any page.
- Request a copy of your survey data by contacting support.
7. Contact
For privacy-related enquiries contact us at forms-contact@boostbyteone.com or via the Contact page.