Privacy Policy

IssueForm is operated by PIOTEE LLC, registered in Sheridan, Wyoming, United States. This Privacy Policy explains how we collect, use, and protect personal information when you use our document template service at issueform.com.

Account information. When you sign in via Google OAuth, we receive your name, email address, and profile avatar from Google. We store this to identify your account and to contact you about the Service.

Document form data. When you fill in a template form (e.g., names, dates, addresses, amounts), that data is processed on our servers to render your document. It is not retained after your document has been generated and delivered to you — we do not store the contents of your form submissions beyond the generation request.

Usage and analytics. We use Google Analytics 4 (GA4) to collect aggregated, anonymized data about how users navigate the site (pages visited, referrers, device type). Individual users are not personally identified in our analytics data.

Payment information. Billing is handled entirely by Polar, our payment processor. We do not store your credit card number or full payment details. We receive subscription status, plan tier, and renewal dates from Polar.

Infrastructure logs. Cloudflare, our hosting provider, collects standard access logs including IP addresses, request timestamps, HTTP status codes, and user-agent strings for security and operational purposes. These are retained for up to 90 days.

We use your information only to:

• Provide, operate, and improve the Service
• Authenticate you and manage your account
• Process your document generation requests
• Process payments and manage subscriptions via Polar
• Detect and prevent abuse, fraud, or security incidents
• Send transactional emails (e.g., receipts, account notices) via Resend
• Send our monthly digest newsletter, if you have opted in
• Respond to your support requests
• Comply with legal obligations

We do not sell your personal data to any third party. We do not use your information to build advertising profiles or train machine learning models.

The data you enter into our template forms (such as names, addresses, dates, and other document-specific fields) is processed in your browser and transmitted to our servers solely for the purpose of rendering your document. This data is used transiently to generate your file and is not retained on our servers beyond completion of the generation request.

In the future we may offer a “saved drafts” feature that optionally stores form data to let you return to incomplete documents. If and when that feature launches, we will update this Policy and provide clear in-product notice.

We share your information only in these limited circumstances:

• Service providers. We share data with Google (OAuth authentication, Analytics), Polar (payment processing), Cloudflare (hosting), and Resend (transactional email). Each operates under its own privacy policy and is restricted to using data only to provide services to us.
• Legal requirements. We may disclose information if required by law, regulation, court order, or to protect the rights, property, or safety of PIOTEE LLC, our users, or the public.
• Business transfers. In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will provide at least 30 days’ notice via email or a prominent site notice before your data is subject to a different privacy policy.

We send transactional emails (receipts, account notices) as necessary to operate the Service. We also offer an optional monthly product digest newsletter. You will only receive marketing emails if you have explicitly opted in during sign-up or in your account settings. You may unsubscribe at any time via the link in any email or by contacting us at hello@issueform.com.

We apply industry-standard security measures to protect your data:

• All data in transit is encrypted using TLS 1.2 or higher
• Data at rest is protected using AES-256 encryption at the infrastructure level (Cloudflare)
• Access to production systems is restricted to authorized personnel

No method of transmission over the internet is 100% secure. If we become aware of a security incident affecting your data, we will notify you as required by applicable law.

We retain your account information for as long as your account is active. Infrastructure access logs are retained for up to 90 days. Document form data is not retained after generation (see Section 4). To request deletion of your account and associated data, contact us at hello@issueform.com. We will process deletion requests promptly, except where retention is required by law (e.g., billing records for tax compliance).

EEA, UK, and Switzerland. If you are located in the European Economic Area, United Kingdom, or Switzerland, you have the right to access, rectify, erase, restrict, or object to processing of your personal data. To exercise these rights, contact us at hello@issueform.com. We will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority.

California and U.S. state laws. If you are a California resident, you have rights under the CCPA, including the right to know what personal information we collect, the right to delete, and the right to opt out of the sale of personal information. We do not sell personal information. Residents of Virginia, Colorado, Connecticut, and other states with applicable privacy laws have similar rights. To exercise any of these rights, contact hello@issueform.com.

Your data is stored and processed primarily in the United States on Cloudflare’s infrastructure. If you are located in the EEA, UK, or Switzerland, this constitutes a cross-border data transfer. We rely on Standard Contractual Clauses (SCCs) and other lawful transfer mechanisms as required by applicable law.

We use a session cookie required for authentication and a locale preference cookie. We use Google Analytics 4 to collect aggregated usage data — GA4 uses cookies to distinguish sessions; no personally identifiable information is shared with Google through analytics. We do not use advertising cookies or cross-site tracking cookies. We do not respond to Do Not Track (DNT) browser signals, as we do not engage in the type of tracking DNT is designed to prevent.

The Service is not directed to individuals under the age of 18 (or 16 where required by applicable law). We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the effective date at the top of this page and, where appropriate, by email. Your continued use of the Service after changes constitutes acceptance of the updated Policy.

For privacy questions, data requests, or complaints, contact us at hello@issueform.com.