Privacy Policy

Product: Formtasia Operator: ServiceBlocks Privacy email: support@formtasia.com Business address: No. 5, Deborah Ayanpate, Beckley Estates Effective date: 24 July 2026 Last updated: 24 July 2026

1. Introduction

Formtasia is a product owned and operated by ServiceBlocks.

This Privacy Policy explains how ServiceBlocks, through Formtasia, collects, uses, stores, discloses and protects personal information when you use:

The Formtasia mobile application;
The Formtasia website;
Public forms created using Formtasia;
Response dashboards and shared links;
Our customer-support channels; and
Other services connected to Formtasia.

In this Policy, “Formtasia”, “ServiceBlocks”, “we”, “us” and “our” refer to ServiceBlocks and the Formtasia product.

“Personal data” means information that identifies a person or can reasonably be linked to an identifiable person.

This Policy applies to form creators, form owners, editors, viewers, respondents, website visitors, support contacts and other people whose personal data is processed through Formtasia.

2. Our role and the form owner's role

2.1 Formtasia as a data controller

Formtasia normally acts as the data controller for information used to:

Create and manage user accounts;
Authenticate users and manage sessions;
Process credit purchases;
Maintain credit balances and transaction records;
Operate, secure and improve the platform;
Provide customer support;
Deliver notifications and operational emails;
Prevent fraud, abuse and security incidents; and
Comply with legal obligations.

2.2 Form owners as data controllers

Form owners decide:

What questions appear in their forms;
Why the information is being collected;
Who receives the form;
Which collaborators can access the form or its responses;
Whether a public response dashboard is enabled;
How submitted responses will be used; and
How long submitted information should be retained.

For personal data submitted through a form, the form owner is normally the data controller, while Formtasia acts as a data processor or service provider acting on the form owner's instructions.

A form owner may be an individual, freelancer, agency, business, school, organisation or another person using Formtasia.

Respondents should read any additional privacy notice provided by the form owner before submitting a response.

2.3 Form owner responsibilities

Form owners are responsible for ensuring that:

They have a lawful reason for collecting personal data;
Their questions are relevant and not excessive;
Respondents are told how their information will be used;
Any required consent is obtained;
Sensitive information is collected only where genuinely necessary;
Collaborator access is properly controlled; and
Respondent requests are handled in accordance with applicable law.

Formtasia does not control the questions created by form owners or the business decisions they make using submitted responses.

3. Personal data we collect

The information we collect depends on how you use Formtasia.

3.1 Account and profile information

We may collect:

Your name;
Email address;
Profile photograph;
Account preferences;
Notification preferences;
Email-verification status;
Password hashes;
One-time password and password-reset records;
Login and session information;
Push-notification device tokens; and
Information you provide when contacting support.

We do not store passwords in readable form.

If you create or access a Formtasia creator account with Google Sign-In, we receive basic Google account information such as your name and email address so we can authenticate you and set up or open your Formtasia account. We use that Google account data only for authentication and account management. We do not sell Google account data or use it for advertising.

3.2 Form and creator information

When you create or manage a form, we may process:

Project descriptions;
Project type;
Client or business industry;
Additional questionnaire instructions;
Form titles and introductions;
Sections and questions;
Help text and question settings;
Confirmation messages;
Form templates;
Form versions and revision history;
Collaborator invitations and assigned roles;
Internal response notes;
Form publication and closure settings;
Public dashboard settings; and
Files uploaded by creators.

3.3 Respondent information

The personal data collected from a respondent depends on the questions selected by the form owner.

This may include:

Name;
Email address;
Telephone number;
Website address;
Business or employment information;
Project information;
Brand, audience, scope, budget or timeline information;
Preferences and opinions;
Free-text responses;
Selected options;
Ratings;
Dates;
Uploaded documents, images or other files;
Submission time;
Response identifier;
Form version;
Review status; and
Limited technical information used for security and duplicate-submission prevention.

Formtasia may support forms that request sensitive personal data. However, form owners should not collect health information, financial information, government identifiers, biometric information, information about children or other sensitive data unless it is necessary and legally permitted.

3.4 Purchase and credit information

When you purchase Formtasia credits, we may receive and process:

App-store transaction identifiers;
Product and package identifiers;
RevenueCat customer identifiers;
Purchase status;
Purchase date;
Storefront or region;
Purchase-validation information;
Credit balances;
Credit expiry dates;
Credit ledger entries;
Manual credit adjustments;
Generation debits; and
Purchase reconciliation records.

Payments may be processed through Apple, Google, RevenueCat or their payment partners.

Formtasia does not directly receive or store your complete payment-card details. Payment methods are processed by the relevant app store or payment provider under its own terms and privacy policy.

3.5 Device, usage and technical information

We may automatically collect:

IP address;
Device type;
Operating system;
Browser type;
App version;
Device language;
Date and time of requests;
Crash and performance information;
Security logs;
Request identifiers;
Forms and features used;
Public-form views;
Questionnaire starts;
Questionnaire submissions;
Completion time;
Notification delivery status;
Notification read status;
Invitation activity;
Dashboard-link activity; and
Rate-limiting and abuse-prevention information.

4. How we collect information

We collect personal data:

Directly from you

This includes information you provide when you:

Create an account;
Update your profile;
Create or edit a form;
Submit instructions for AI generation;
Purchase credits;
Upload a file;
Submit a form response;
Invite a collaborator;
Contact support; or
Change your account settings.

From form owners and collaborators

A form owner may provide your email address when inviting you to become an editor or private viewer.

Automatically

We may collect technical and usage information through our applications, websites, servers, security systems, cookies, local storage and similar technologies.

From service providers

We may receive information from app stores, RevenueCat, email providers, push-notification providers, hosting providers, security services and other companies that help us operate Formtasia.

5. How we use personal data

We may use personal data to:

Create and manage accounts;
Verify email addresses;
Authenticate users;
Manage sessions and password resets;
Generate questionnaires using artificial intelligence;
Create, edit, publish, close, archive and duplicate forms;
Maintain form versions;
Render public forms;
Accept and validate form submissions;
Store responses and uploaded files;
Provide collaboration and invitation features;
Provide private and public response dashboards;
Generate downloadable Excel exports;
Deliver response notifications;
Process and reconcile credit purchases;
Maintain an auditable credit ledger;
Deduct credits following successful AI generation;
Prevent duplicate charges;
Provide customer support;
Respond to privacy requests;
Detect fraud, spam, misuse and security incidents;
Enforce our Terms of Service;
Troubleshoot errors;
Improve performance and reliability;
Measure product usage;
Maintain audit records;
Comply with legal obligations; and
Establish, exercise or defend legal claims.

We may also create aggregated or de-identified statistics that do not reasonably identify any individual.

6. Legal grounds for processing

Where applicable law requires us to identify a lawful basis, we may process personal data on the following grounds:

Performance of a contract

We process information where it is necessary to provide Formtasia services requested by you, including account access, questionnaire generation, form management, purchases, credits, collaboration, response storage and exports.

Legitimate interests

We may process information where necessary for legitimate interests such as:

Operating and improving Formtasia;
Securing the platform;
Preventing fraud and abuse;
Providing customer support;
Maintaining transaction and audit records; and
Protecting our users, business and legal rights.

We will consider whether these interests are overridden by your rights and freedoms.

Consent

We may rely on consent for optional communications, device permissions, certain analytics technologies or other processing where consent is required by law.

For respondent information, the form owner is responsible for obtaining consent where consent is the appropriate legal basis.

Legal obligations

We may process or retain information where necessary to comply with tax, accounting, regulatory, law-enforcement, data-protection or other legal requirements.

7. Artificial intelligence processing

Formtasia uses an artificial-intelligence provider to generate structured questionnaires from instructions submitted by creators.

Information sent for AI generation may include:

The project description;
Project type;
Client industry;
Additional instructions;
Prompt and model configuration;
Technical request information; and
The generated questionnaire output.

Formtasia currently uses Google Gemini or another approved AI provider to perform questionnaire generation.

Under the current product scope, submitted respondent answers are not sent to the AI provider for questionnaire generation, analysis or summarisation.

Creators should avoid including confidential personal information, passwords, payment-card information, government identifiers or unnecessary sensitive information in AI-generation instructions.

AI-generated questions may be inaccurate, unsuitable or incomplete. Creators must review generated questionnaires before publishing them.

Formtasia should not be used to make solely automated decisions that produce legal or similarly significant effects concerning a person.

8. How we disclose personal data

We do not sell personal data.

We do not share personal data for cross-context behavioural advertising.

We may disclose personal data in the following circumstances.

8.1 To form owners and authorised collaborators

Responses may be accessible to:

The form owner;
Active editors;
Authorised private viewers; and
People given access through an enabled public response dashboard.

Access depends on the permissions configured by the form owner.

Public dashboards may be accessible to anyone who possesses the relevant link until the link expires or is revoked. Form owners are responsible for sharing these links carefully.

8.2 To service providers

We may use service providers for:

Application hosting;
Database hosting;
Private file storage;
Artificial-intelligence generation;
Purchase validation;
Email delivery;
Push notifications;
Error monitoring;
Analytics;
Security;
Customer support; and
Infrastructure maintenance.

These providers may process information only to provide their services to us, subject to their agreements and applicable law.

Service providers used by Formtasia may include:

RevenueCat for purchase validation and reconciliation;
Apple App Store and Google Play for application distribution and payments;
Google Sign-In / Google Identity for optional creator account authentication;
Google Gemini for questionnaire generation;
Cloudflare R2 for private file and export storage;
Resend or another approved email provider;
Apple Push Notification Service, Firebase Cloud Messaging or Expo notification infrastructure; and
Hosting, database, analytics and monitoring providers used to operate the platform.

8.3 For legal and safety reasons

We may disclose information where reasonably necessary to:

Comply with applicable law;
Respond to a court order or lawful government request;
Investigate fraud, misuse or security incidents;
Protect the rights and safety of Formtasia, ServiceBlocks, our users or others;
Enforce our agreements; or
Establish, exercise or defend legal claims.

8.4 Business changes

If ServiceBlocks or Formtasia is involved in a merger, acquisition, financing, restructuring or sale of assets, personal data may be disclosed as part of that transaction.

Any successor will be required to handle personal data consistently with this Policy and applicable law.

9. International data transfers

Formtasia is operated by ServiceBlocks in Nigeria.

Some service providers may process or store information outside Nigeria or outside the country where a user or respondent is located.

Where required, we will use appropriate measures for international data transfers. These may include:

Contracts containing data-protection obligations;
Standard contractual clauses;
Transfer agreements;
Provider security assessments; and
Other safeguards recognised by applicable law.

By using Formtasia, you understand that your information may be processed in countries whose data-protection laws may differ from those in your country.

10. Data retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy.

Retention depends on the type of information and why it is processed.

Account and profile data

Account information is generally retained while the account remains active. When an account is deleted, profile information is deleted or anonymised, subject to lawful retention requirements.

Forms and responses

Forms, form versions and responses are retained until:

The form owner deletes them;
The form owner deletes the account;
A valid deletion request is approved; or
Retention is no longer necessary or legally permitted.

Historical form versions may be retained while related responses exist so that submitted answers remain understandable.

Uploaded files

Temporary files that are not attached to a completed response may be automatically deleted after a limited operational period.

Files attached to completed responses may be retained until the response, form or account is deleted.

Exported files

Generated Excel exports may be stored temporarily and removed through scheduled cleanup.

Copies downloaded by users are outside Formtasia’s control.

Purchase and credit records

Purchase transactions, RevenueCat events, credit ledger records and related payment records may be retained after account deletion where required for:

Accounting;
Auditing;
Fraud prevention;
Legal compliance;
Purchase reconciliation; or
Dispute resolution.

Security and audit records

Security logs, access records and audit events may be retained for a limited period appropriate to fraud prevention, security investigations, rate limiting, dispute handling and legal compliance.

Backups

Deleted information may remain in encrypted backups for a limited rolling period before being overwritten.

11. Security

We use reasonable technical and organisational safeguards designed to protect personal data.

These safeguards may include:

Encrypted network connections;
Password hashing;
Access controls;
Role-based permissions;
Per-form authorisation;
Secure or hashed public tokens;
Private file storage;
Expiring file-access links;
Rate limiting;
Webhook verification;
Input validation;
Payload-size limits;
Session controls;
Audit logging;
Data minimisation;
Sensitive-log redaction;
Database transactions;
Monitoring;
Backup controls; and
Security incident procedures.

No online service can guarantee absolute security. Users are responsible for maintaining the confidentiality of their login details and for promptly reporting suspected unauthorised access.

Form owners are also responsible for managing collaborator access and avoiding unnecessary distribution of public dashboard links.

12. Cookies and similar technologies

The Formtasia website and public forms may use cookies, browser storage, local storage or similar technologies to:

Keep users signed in;
Maintain security;
Remember preferences;
Prevent duplicate submissions;
Recover temporary form progress;
Measure usage;
Diagnose errors; and
Improve performance.

Where legally required, we will request consent before using non-essential cookies or analytics technologies.

You may be able to control cookies through your browser settings. Disabling certain technologies may prevent parts of Formtasia from functioning correctly.

13. Notifications and communications

We may send:

Email-verification messages;
Password-reset messages;
Collaborator invitations;
Purchase and credit notifications;
Security notices;
Response notifications;
Account notices;
Service updates; and
Customer-support communications.

You may manage certain notification preferences through your Formtasia account or device settings.

We may still send essential transactional, security or legal communications where necessary to operate your account.

14. Your privacy rights

Depending on your location and applicable law, you may have the right to:

Request confirmation that we process your personal data;
Request access to your personal data;
Request correction of inaccurate or incomplete information;
Request deletion of personal data;
Request restriction of processing;
Object to certain processing;
Withdraw consent;
Request a portable copy of information you provided;
Object to direct marketing;
Request information about how your data is used;
Complain about our handling of personal data; and
Lodge a complaint with a data-protection authority.

These rights may be limited where an exception applies, including where information must be retained for legal obligations, fraud prevention, security, accounting or legal claims.

To submit a request relating to information controlled directly by Formtasia, email support@formtasia.com.

We may need to verify your identity before completing a request.

We will not discriminate against you for exercising an applicable privacy right.

15. Account deletion

Account owners may request deletion through the available Formtasia account settings or by emailing support@formtasia.com.

Where an account owns active published forms, we may require additional confirmation before completing deletion.

Account deletion is designed to:

Disable authentication;
Revoke active sessions;
Delete or anonymise profile information;
Delete forms and form versions;
Delete submitted responses;
Delete uploaded files;
Delete generated exports;
Revoke public dashboard links;
Remove collaborator access;
Delete AI-generation history and related product records; and
Retain only limited payment and purchase records where legally or operationally required.

Deleting your Formtasia account does not automatically delete:

Copies of responses or exports previously downloaded by another person;
Information independently retained by a form owner;
Information controlled by Apple, Google, RevenueCat or another third party; or
Information we are legally required to retain.

16. Requests concerning form responses

When your request concerns information submitted through a Formtasia form, you should normally contact the form owner first.

The form owner determines why the response was collected and how it is used. The owner is therefore usually responsible for deciding whether the response should be accessed, corrected, exported, restricted or deleted.

Where Formtasia acts as a processor, we may:

Forward your request to the form owner;
Request information needed to locate the relevant form and response;
Assist the form owner in completing the request; or
Explain that we cannot alter the response without the owner’s instructions unless required by law.

When contacting Formtasia about a response, provide:

The public form link;
The form owner’s name, where known;
The approximate submission date;
The email address or name used in the response; and
Any available response identifier.

Do not send passwords, complete payment-card information or unnecessary sensitive information with your request.

17. Children’s privacy

Formtasia creator accounts are intended for adults and are not directed to people under 18 years old.

We do not knowingly allow a child to create and operate a Formtasia creator account.

Form owners must not knowingly collect personal data from children unless:

The collection is lawful;
The form is age-appropriate;
The information is genuinely necessary;
An appropriate privacy notice is provided; and
Parental or guardian consent is obtained where required.

If you believe that a child’s personal data has been collected unlawfully through Formtasia, contact the relevant form owner and email us at support@formtasia.com.

We may suspend a form, restrict access or delete information where necessary to protect a child or comply with applicable law.

18. Third-party websites and services

Formtasia forms may contain links to websites, files or services controlled by third parties.

We are not responsible for the privacy or security practices of third-party services.

You should review the privacy policies of those services before providing personal information.

19. Changes to this Privacy Policy

We may update this Privacy Policy to reflect:

New Formtasia features;
Changes to our service providers;
Changes to legal requirements;
Security improvements; or
Changes to our privacy practices.

When this Policy is updated, we will revise the “Last updated” date.

Where a change is material, we may provide additional notice through the application, website or email, where required.

20. Complaints

Questions or complaints about Formtasia’s privacy practices should be sent to:

ServiceBlocks/Formtasia Email: support@formtasia.com Address: No. 5, Deborah Ayanpate, Beckley Estates

You may also lodge a complaint with the Nigeria Data Protection Commission or another competent data-protection authority in your country.

We encourage you to contact us first so we can attempt to resolve the issue directly.

21. Contact us

For privacy questions, access requests, deletion requests or complaints, contact:

ServiceBlocks/Formtasia Privacy email: support@formtasia.com Business address: No. 5, Deborah Ayanpate, Beckley Estates Website: formtasia.com