MakingFlowThis Privacy Policy explains how MakingFlow, operated by Figmenta (“MakingFlow”, “we”, “us”), handles personal data. We are based in the European Union and aim to comply with the EU General Data Protection Regulation (GDPR).
1. Two roles: controller and processor
For data about account holders (the people who sign up and build forms), we are the data controller. For data submitted by respondents through a creator’s forms, the form creator is the controller and MakingFlow acts as a processor on their behalf. We process that data only to provide the service and on the creator’s instructions.
2. Data we collect
- Account data: your name, email address, and authentication details when you sign up (including via Google sign-in).
- Form and response data: the forms you build and the answers, files, and metadata respondents submit. This may include personal data you choose to collect (for example, names, contact details, or CVs).
- Usage data: limited technical and analytics data such as device type, approximate country, referrer, and event counts used to power your dashboards and to keep the service secure and reliable.
- Billing data: if you subscribe to a paid plan, billing details are handled by our payment provider; we do not store full card numbers.
3. How we use data
- to provide, maintain, and secure the service and your account;
- to build, render, translate, and summarize forms and responses, including AI features;
- to deliver responses to the integrations you connect (such as Google Sheets or email);
- to show you analytics about your forms;
- to communicate with you about your account, security, and service updates;
- to comply with legal obligations and enforce our Terms.
4. AI processing
MakingFlow uses third-party AI models (currently Google’s Gemini models) to power form generation, conditional logic, multi-language support, and response summaries. Form definitions and, where you enable it, response content may be sent to the AI provider to produce these results. Build-time AI features operate on the form definition only, not on respondent answers. We do not use your content to train our own models, and we rely on the AI provider’s commitments regarding the handling of submitted data.