Legal

Privacy Policy

Effective Date: January 1, 2026 · Last Updated: March 1, 2026

Your privacy is important to us. This policy explains what data we collect, how we use it, and your rights as a user.

1. Information We Collect

We collect information you provide directly to us, including:

Account information: Name, email address, password (hashed)
Organization information: Nonprofit name, mission, state of incorporation, EIN, board member names and contact details, address
Payment information: Processed securely via Stripe. FormRight does not store full credit card numbers.
Usage data: Pages visited, features used, browser type, IP address, and session data collected via cookies and analytics tools

2. How We Use Your Information

We use the information we collect to:

Generate and deliver your nonprofit formation documents
Submit filings to state and federal agencies on your behalf (for applicable service tiers)
Send transactional emails including confirmations, receipts, and status updates
Send compliance reminders if you have subscribed to that service
Improve the platform through anonymized usage analytics
Respond to support requests and communications
Comply with legal obligations

We do not sell your personal information to third parties. We do not use your information for advertising purposes.

3. Data Sharing

We share your information only in the following circumstances:

Service providers: Stripe (payments), Supabase (database and document storage), and email service providers, all subject to data processing agreements
Government agencies: State incorporation offices and the IRS, as necessary to fulfill your filing service
Legal compliance: Where required by law, court order, or to protect the rights and safety of FormRight and its users

4. Data Storage and Security

Your documents and personal data are stored on encrypted servers hosted on Supabase. We use industry-standard SSL/TLS encryption for all data in transit. Access to client data is restricted to authorized FormRight staff with a legitimate business need.

While we implement reasonable security measures, no system is completely secure. We cannot guarantee the absolute security of your information.

5. Data Retention

We retain your account and document data for as long as your account is active and for a period of 7 years thereafter to comply with legal and tax recordkeeping requirements. You may request deletion of your account data subject to these retention obligations.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data (subject to legal retention requirements)
Opt out of non-essential communications
Data portability (receive your data in a machine-readable format)

To exercise any of these rights, contact us at privacy@rightform.org.

7. Cookies

We use essential cookies to keep you logged in and maintain your session. We may also use analytics cookies (e.g., Google Analytics) to understand how users interact with our platform. You can disable cookies in your browser settings, though this may affect platform functionality.

8. Children's Privacy

FormRight is not intended for use by individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of significant changes via email. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

10. Contact

For privacy-related questions or requests, contact us at privacy@rightform.org.