The prompts you write, the AI-generated form structures, and the responses respondents submit are all Customer Data. Per Section 4.4 of our Data Processing Addendum, Formester does not use Customer Data to train AI models, run advertising, run analytics, or feed marketing. The Google Gemini integration that drafts forms inherits the same boundary.
Your account is encrypted at rest, responses move over TLS, and payment data carries an additional AES-256 layer through Stripe. We are GDPR, UK GDPR, and CCPA compliant. We are not SOC 2, ISO 27001, or HIPAA certified yet, and we say so on the security page rather than implying otherwise. If your buying review requires those today, we'll tell you up front.