Privacy Policy

Formify is a tool that converts question papers (PDF or DOCX files) into Google Forms. You upload a file, we extract the questions using AI, and create a Google Form in your Google Drive on your behalf.

We collect the minimum data necessary to operate the service:

• Google account information — your name and email address, obtained when you sign in with Google. We use this only to identify your session.
• Google OAuth access token — a short-lived token that allows us to create Google Forms in your Drive on your behalf. This token is stored in your session cookie and is never written to a database.
• Uploaded file content — the text extracted from your PDF or DOCX file is sent to our AI provider (Groq) to identify questions. We do not store this text after the request completes.

• We do not store your uploaded files on our servers.
• We do not store the questions parsed from your documents.
• We do not store the Google Forms we create on your behalf — they go directly into your Google Drive.
• We do not sell, share, or monetise your data in any way.
• We do not use your data to train AI models.
• We do not use analytics trackers or advertising cookies.

Formify uses the following Google APIs on your behalf after you sign in:

• forms.body— "The app creates Google Forms on behalf of the user by converting uploaded question papers. This scope is required to create and populate form items."
• drive.file— "The app saves created Google Forms to the user's Google Drive. This scope is limited to files created by the app and does not access any existing Drive files."

Formify's use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements.

Google user data obtained through these APIs is never used to train, fine-tune, or improve any AI or machine learning model, including the AI models used by Formify for question extraction.

• Groq— the extracted text from your document is sent to Groq's API to identify and structure questions. Groq's privacy policy is available at groq.com/privacy-policy.
• Vercel— Formify is hosted on Vercel. Vercel may log standard HTTP request metadata (IP address, timestamp, route) for operational purposes. Vercel's privacy policy is at vercel.com/legal/privacy-policy.

Formify uses a single session cookie managed by NextAuth to keep you signed in. This cookie contains your session token and expires when you sign out or after a standard session period. We do not use advertising cookies or third-party tracking cookies.

We also use browser sessionStorage temporarily to preserve your work across the Google sign-in redirect. This data is cleared immediately after the redirect completes and never leaves your browser.

We do not operate a database. No Google user data, uploaded documents, or parsed questions are persisted beyond the duration of your active session. Your Google access token is stored in an encrypted session cookie that expires when you sign out or after 30 days of inactivity. You can revoke Formify's access to your Google account at any time by visiting myaccount.google.com/permissions.

Because we do not store personal data beyond your active session, there is nothing to delete or export. You can revoke Formify's access to your Google account at any time by visiting myaccount.google.com/permissions and removing Formify from the list of connected apps.

We implement standard security measures to protect your sensitive data. All data transferred between your browser and our servers, as well as between our servers and Google or Groq APIs, is encrypted in transit using Transport Layer Security (TLS 1.2 or higher/HTTPS). Furthermore, your Google OAuth access token is stored exclusively in your browser's encrypted session cookie and is never written to disk or any database.

Formify is not directed at children under 13. We do not knowingly collect personal information from children under 13.

If we make material changes to this policy, we will update the "Last updated" date at the top of this page. Continued use of Formify after changes constitutes acceptance of the updated policy.

If you have questions about this privacy policy or how your data is handled, contact us at: ojaswitsingh10@gmail.com