formbasedocs
Go to appApp

Legal

Terms of Service

The rules that govern your access to and use of formbase, our website, applications, APIs, and integrations.


Last updated: 7 October 2026

These Terms apply to everyone who creates an account or uses formbase. Read them carefully. If you have questions, contact us at support@formbase.so.

1. Acceptance of Terms

These Terms of Service (“Terms”) govern your access to and use of formbase, operated by Formbase AS, a Norwegian limited company with organisation number 937 921 217 and registered office in Oslo, Norway (“formbase”, “we”, “us”), including our website, applications, APIs, integrations, and related services (collectively, the “Service”). By creating an account or accessing the Service, you agree to be bound by these Terms.

If you are using the Service on behalf of an organisation, you represent that you have authority to bind that organisation to these Terms, and “you” refers to both you personally and that organisation.

If you do not agree to these Terms, you must not create an account or use the Service. Your continued use of the Service following any updates to these Terms constitutes acceptance of the revised version.

These Terms incorporate by reference our Privacy Policy, Data Processing Agreement (where applicable), and any product-specific terms presented to you within the Service.

2. Definitions

For the purposes of these Terms, capitalized terms have the meanings set out below:

  • Service means the formbase platform and all features made available through it, including the form builder, hosted forms, dashboards, integrations, AI features, and APIs.
  • User means any individual who accesses or uses the Service in an Account capacity, whether as a workspace owner or member. Respondents are not Users — see Section 6.
  • Customer means a User who holds the formbase Account under which the Service is used; for individual accounts this is you, for business accounts this is the organisation you act on behalf of.
  • Account means the personal record created when you register for the Service, identified by a unique email address.
  • Workspace means a separately addressable environment within the Service in which forms, submissions, members, and settings are organised.
  • Form means any survey, questionnaire, application, checkout, or other interactive document created and published through the Service.
  • Submission means a response, entry, file upload, payment, or other data record collected through a Form.
  • Subscription means a recurring paid plan that unlocks features or capacity on your Account.
  • Content means any text, media, file, configuration, response, code, prompt, or other material that you, your collaborators, or your respondents create, upload, transmit, or store through the Service.
  • Your Content means the Content that belongs to your account, as described in Section 8.
  • AI Features means any functionality of the Service that uses machine learning or large language models to generate, transform, summarize, route, or otherwise process Content on your behalf.
  • Respondent means a person who submits a response to a Form, whether or not they hold an Account.

3. Eligibility

To use the Service, you must be at least thirteen (13) years old and have the legal capacity to enter into a binding contract under the laws of your jurisdiction. Where the law that applies to you sets a higher minimum age for consenting to online services or to the processing of your personal data, you must meet that higher age. If you are below the age of majority in your country, you confirm that a parent or legal guardian has authorised your use of the Service.

You may not use the Service if you are barred from doing so under applicable laws, including export controls and sanctions administered by Norway, the European Union, the United Nations, the United Kingdom, or the United States. You confirm that you are not located in, ordinarily resident in, or organised under the laws of a country or territory subject to comprehensive sanctions, and that you are not listed on any restricted-party or denied-persons list.

We may, at our discretion, refuse, suspend, or terminate access where we reasonably believe these eligibility requirements are not met.

4. Account Registration and Security

To access most features of the Service, you must register an Account. When you register, you agree to provide accurate, current, and complete information, and to keep that information up to date.

Each Account is intended for a single human individual. You may not share login credentials, transfer your Account to another person, or allow multiple people to operate under the same Account (including through a shared inbox or alias). For team use, each team member must register their own Account and you may invite them to your Workspace under their own Accounts.

You are responsible for safeguarding your credentials and for any actions taken under your Account, whether or not authorised by you. The Service does not use passwords of its own; you sign in through a magic link sent to your email address or through Google OAuth. You may also try formbase without registering through a temporary anonymous guest session; guest sessions are temporary and do not persist data.

Notify formbase without undue delay if you become aware of any unauthorised access, suspected compromise, or other security incident involving your Account; you can also reach us at support@formbase.so. To the extent permitted by applicable law, we are not liable for losses resulting from your failure to protect your credentials or to notify us promptly.

5. Workspaces and Team Accounts

The Service is organised around Workspaces. The individual who creates a Workspace is its initial owner and is treated as the primary account holder for ownership of Content and administrative decisions affecting that Workspace.

Workspace owners may invite additional members to a Workspace. Workspace roles are currently limited to owner and member; owners administer the Workspace and its billing-relevant configuration, and members can access forms, submissions, and integrations to the extent permitted by the Workspace’s settings, as described in the Service’s documentation and as updated from time to time.

If you are invited to a Workspace, you acknowledge that the Workspace owner controls the configuration of that Workspace and may have visibility into, and authority over, the Forms, Submissions, and activity occurring within it. Your use of a Workspace is additionally subject to any internal policies set by its owner, provided they do not conflict with these Terms.

A Workspace is intended to support a single team or organisation collaborating together. The paid features that extend to the members of a Pro-owned Workspace are provided for that collaboration. They are not a means to give the paid features of the Service to unrelated individuals, to multiple distinct organisations, or to the general public under a single Subscription. formbase may apply fair-use limits to the number of members in a Workspace and reserves the right to require separate Subscriptions where a single Workspace, or a set of Workspaces under one Account, is used to extend paid features beyond a single team or organisation.

Workspace ownership does not currently transfer through a self-service flow.

formbase is not a party to any agreement between Workspace owners and their members or Respondents, and is not responsible for resolving disputes among them.

6. Acceptable Use Policy

You may use formbase to build, publish, and manage forms for lawful purposes that comply with these Terms and any laws applicable to you and to the people you collect information from. Typical permitted uses include customer feedback, lead capture, surveys, registrations, applications, internal workflows, payment collection through supported processors, and similar form-driven activities.

You are solely responsible for the forms you publish, the questions you ask, the data you collect, the files respondents upload, and how you store, share, or act on that information. If you collect personal data, you act as the data controller for that data and must provide respondents with any notices, choices, and legal bases required under applicable privacy laws.

formbase is a general-purpose form builder and is not designed, certified, or warranted for use with regulated sensitive data. formbase does not currently offer any certification, business associate agreement, or written authorisation for regulated data use cases — no such arrangement can be obtained by email request alone. Unless we have explicitly agreed otherwise with you in a separate written agreement signed by an authorised representative of formbase, you must not use formbase to collect, store, or process:

  • Protected Health Information (PHI) subject to the U.S. Health Insurance Portability and Accountability Act (HIPAA) or equivalent health-data regimes;
  • Cardholder data subject to PCI DSS, except through the Payment field — Stripe collects and processes all card data directly; formbase receives only non-sensitive references such as the last four digits;
  • Government-issued identifiers used as primary identity proofing (such as full social security numbers, national ID images) unless you have implemented your own additional safeguards;
  • Information about minors below the age of consent under applicable law, including data subject to the U.S. Children’s Online Privacy Protection Act (COPPA), unless you have obtained verified parental or guardian consent and have your own compliant workflow;
  • Any other category of data for which your applicable laws require a specific certification, contract, or technical measure that formbase has not undertaken in writing.

If your use case involves any of the above, you are responsible for assessing fitness yourself, putting any additional safeguards in place, and seeking written confirmation from formbase before proceeding.

Respondents are not Users of formbase. Your relationship with respondents is governed by your own terms and privacy practices. You are responsible for handling their data and any disputes that arise from your forms.

Electronic signatures collected through formbase’s Signature field are not qualified or advanced electronic signatures under the EU eIDAS Regulation. They may not satisfy the heightened evidentiary requirements for document types that require a qualified signature under applicable law. You are responsible for assessing whether signatures collected through formbase meet the legal requirements for your specific use case and jurisdiction.

7. Prohibited Uses

You must not use formbase, and must not allow anyone else to use your account, to do any of the following:

  • Publish, transmit, or solicit content that is illegal under the laws that apply to you or to your respondents.
  • Harass, threaten, defame, or incite violence against any person or group.
  • Send spam, unsolicited bulk messages, or use formbase to drive traffic to deceptive destinations.
  • Conduct phishing, credential harvesting, or any form of social engineering.
  • Distribute malware, viruses, ransomware, or links to malicious software.
  • Scrape, crawl, or harvest data from formbase or its users by automated means, except through documented APIs within published rate limits.
  • Circumvent or attempt to circumvent submission limits, plan restrictions, paywalls, rate limits, branding restrictions, or other technical controls.
  • Infringe any copyright, trademark, patent, trade secret, publicity, or other intellectual property right.
  • Upload, request, or generate child sexual abuse material (CSAM) or content that sexually exploits or endangers minors. Where we become aware of such content we are required by law to report it to the relevant authorities (for users in Norway, Kripos; we may also forward reports to organizations such as NCMEC (CyberTipline) where appropriate) and we will do so.
  • Commit fraud, run deceptive schemes, or misrepresent your identity, affiliation, or the purpose of your forms.
  • Create fake accounts, abuse guest sessions, use multiple accounts or sessions to evade limits or bans, or sell, rent, or transfer accounts to others.
  • Share, resell, or redistribute the paid features of the Service in breach of the Workspace fair-use rules in Section 5.
  • Use formbase AI Features to generate, refine, or distribute content that is illegal, harmful, hateful, sexually explicit involving minors, or that would otherwise violate these Terms.
  • Abuse payment-enabled forms, including processing test or stolen card data, laundering funds, or collecting payments for goods or services you cannot lawfully provide.
  • Interfere with the integrity, security, or performance of formbase, including by probing, load testing without permission, or attempting to gain unauthorised access to any account, system, or data.

We may update the list of prohibited uses as new patterns of abuse emerge.

8. Your Content and Ownership

You retain all rights you already have in the content you bring to formbase. This includes the forms you build, the questions and copy you write, the media and files you upload, the submissions your respondents send you, and any data you import or sync through integrations (“Your Content”).

To operate the Service for you, you grant formbase a worldwide, non-exclusive, royalty-free licence to host, store, copy, transmit, display, render, process, back up, and otherwise use Your Content solely as needed to provide, secure, and support the Service for your account, and to improve the Service through aggregated and de-identified analytics that do not contain personal data. This licence covers the technical operations required to run formbase, such as serving forms to respondents, delivering email and webhook notifications, running integrations you enable, generating previews and analytics for you, and maintaining backups.

If you use AI Features, you grant the additional permissions needed for those features to function, including sending the relevant inputs to the AI provider that powers AI Features on your behalf. The provider details, data-handling, and no-training commitments for AI Features are described in Section 16.

This licence lasts only as long as Your Content is on formbase, and ends when you or we delete it, subject to short retention windows in backups and logs and to any obligation we have to retain records under applicable law. You are responsible for ensuring you have the rights needed to grant this licence for everything you upload, including any third-party content and any personal data of respondents.

formbase, the formbase brand, the Service, its software, and all related materials we provide remain our property or the property of our licensors. Nothing in these Terms transfers ownership of the Service to you.

9. Content Moderation and Reporting

We have the right, but not the obligation, to review content on formbase. We do not pre-screen forms or submissions, and you should not rely on us to do so.

When we become aware of content or behaviour that violates these Terms or applicable law, we may take any action we consider appropriate. This includes removing or disabling forms, files, or submissions, suspending or terminating accounts, withholding payouts on payment forms, preserving records for investigations, and reporting illegal content to the relevant authorities. Where reasonable and lawful, we will tell you what we have done and why.

If you believe content on formbase violates these Terms or your rights, contact us at support@formbase.so with enough information for us to locate and assess it. For copyright and other intellectual property complaints, including notices similar to those provided for under the U.S. Digital Millennium Copyright Act, send your notice to support@formbase.so and include the works concerned, the URLs of the allegedly infringing content, your contact details, and a statement that your complaint is made in good faith. Counter-notices may be sent to the same address.

We may keep records of reports and the actions we take in response. Submitting a knowingly false or abusive report is itself a breach of these Terms. In appropriate circumstances, we terminate the accounts of users who repeatedly infringe the intellectual property rights of others.

formbase does not scan files uploaded by respondents for malware or other harmful content. You are responsible for any files your respondents upload through your forms, and you should not download or open files from untrusted respondents without appropriate precautions.

10. Plans and Subscriptions

formbase is offered on a free tier and paid Pro and Business tiers. Each plan defines the features and usage limits available to you, and the current details for every plan are published on the formbase pricing page.

The free tier lets you build, publish, and collect responses from forms within the limits described on the pricing page. It is intended for personal use, evaluation, and low-volume projects. formbase may apply soft caps, formbase branding on public forms, or feature restrictions to the free tier, and may adjust these from time to time. If you exceed the limits applicable to your plan, formbase may stop accepting new submissions on affected forms, display a limit-reached notice, or notify you by email.

The Pro tier unlocks higher limits, custom domains, custom themes, advanced analytics, and AI Skills. No plan includes AI credits; you purchase them separately as described in Section 12. The Business tier builds on Pro and additionally includes respondent email verification, custom data retention schedules, version history, a higher custom-domain allowance, and an optional shared AI credit pool for workspace members. Third-party integrations (webhooks, automation platforms, and similar connections) are available on all plans; Pro unlocks higher submission volumes that make them more practical at scale. You may subscribe to Pro or Business on a monthly or yearly billing cycle. Yearly subscriptions are billed up front for the full term and typically include a discount relative to the monthly price.

Subscriptions are tied to your individual formbase user account, not to a workspace. If you belong to multiple workspaces, your plan entitlements and AI credit balance follow you across all of them. Workspaces themselves are not billed; only users are. When you are the owner of a workspace and your account is on a paid tier, that tier’s features (such as custom domains, higher submission limits, and advanced analytics) extend to all members of that workspace; members do not need their own subscription to access those features within your workspace. This member benefit is subject to the fair-use rules in Section 5. On the free and Pro tiers, AI credits remain personal to each user. On the Business tier, the workspace owner may enable a shared pool, in which case members consume the owner’s purchased AI credits while working in that owner’s workspaces.

Your subscription renews automatically at the end of each billing cycle using the payment method on file, unless you cancel before the renewal date.

A first Pro subscription on the monthly billing cycle may start with a free trial, whose length is shown at checkout. You provide a payment method at checkout, and nothing is charged during the trial. Unless you cancel before the trial ends, the trial converts into a paid monthly Pro subscription and the first payment is charged when the trial ends. If you cancel during the trial, or the first payment fails, your account moves to the free tier when the trial ends. formbase may limit trials to one per person, account, or payment method, and may change or withdraw the trial offer at any time.

formbase may change the prices, features, or limits of any plan. For changes that affect the price you pay on renewal, or that materially reduce the features or limits available on a paid plan, we will give you reasonable advance notice before the change takes effect. If you do not accept the change, you may cancel your subscription before it renews, and your access will continue under your existing plan until the end of your current billing period.

11. Payment Processing and Billing

All subscription payments and AI credit purchases on formbase are processed by Polar (polar.sh), our payment provider. Polar acts as the Merchant of Record for these transactions. This means Polar sells the formbase subscription or credit pack to you, collects payment, issues the receipt or invoice, and handles applicable taxes on our behalf.

When you subscribe or top up credits, you also agree to Polar’s terms of service and privacy policy in addition to these Terms. Your card details, billing address, and other payment information are collected and stored by Polar, not by formbase. formbase receives only the limited transaction data needed to provision your plan and credits and to handle support requests.

Because Polar is the Merchant of Record, Polar determines and charges any value-added tax, goods and services tax, sales tax, or equivalent levy that applies to your purchase based on your billing location. The price displayed at checkout will reflect taxes where required. You are responsible for providing accurate billing and tax information, including any VAT number or business identifier if you are purchasing as a business.

Receipts and, where applicable, tax-compliant invoices are issued by Polar and made available through the billing portal linked from your formbase account. If you need a corrected invoice, contact Polar through the billing portal.

If payment cannot be collected, your account may enter a grace period during which Pro features are progressively restricted, and may ultimately be downgraded to the free tier until the outstanding balance is paid, as described in the billing documentation. You remain responsible for any amounts owed.

12. AI Credits

Several formbase features, such as AI-assisted form building, AI chat for analysing submissions, and the AI skill picker, consume AI credits. Credits represent prepaid usage of the underlying AI models that power these features and are not a currency, store of value, or property right.

No plan includes AI credits. You can purchase credit top-ups from Polar at any time, on any plan. Purchased credits do not expire and remain available on your account until they are used.

Different AI operations consume different amounts of credits depending on the model used and the size of the input and output. The current consumption rates are published in the formbase documentation and may be adjusted as model pricing or capabilities change.

Credits are tied to your user account and cannot be transferred, gifted, resold, or exchanged for cash. Purchased top-up credits are not refundable once they are used, except where required by mandatory consumer protection law.

formbase applies fair use protections to AI Features to keep the Service stable and affordable for everyone. We may rate-limit, throttle, or temporarily pause AI operations if we detect automated abuse, attempts to extract model weights or training data, or usage patterns that materially exceed normal interactive use. Fair use thresholds, where defined, are published in the formbase documentation. If we suspect fraud or abuse, we may also suspend AI access while we investigate.

13. Cancellation, Refunds and Right of Withdrawal

You can cancel your Pro subscription at any time from your formbase billing settings. When you cancel, your subscription will not renew at the end of the current billing period. You keep access to Pro features until that period ends, after which your account is moved to the free tier. Purchased AI credits stay on your account. Your forms, responses, and workspace data remain available subject to the free tier’s limits.

formbase does not offer refunds for unused subscription time, unused AI credits, or partially used billing periods, except where required by mandatory consumer protection law or as provided by the Data Processing Agreement in the event of termination following a subprocessor objection. This applies whether you cancel mid-cycle, downgrade, stop using the Service, or are downgraded automatically after a failed payment. Where Polar has issued an invoice, any refund decision is also subject to Polar’s policies as Merchant of Record.

If you are a consumer resident in the European Union, the European Economic Area, or Norway, you have a statutory 14-day right to withdraw from a distance contract for digital services, without giving any reason. Because Polar, as Merchant of Record, collects your express prior consent to immediate delivery at checkout — in accordance with Article 16(m) of Directive 2011/83/EU and the Norwegian Right of Cancellation Act (Angrerettloven 2014, LOV-2014-06-20-27) — performance begins when the purchase is completed, and the right of withdrawal is exhausted from that point.

14. Respondent Payments via Stripe Connect

formbase lets you add Payment fields to your forms so that respondents can pay you when they submit a response, for example for bookings, donations, paid registrations, or product orders. These respondent payments are processed through Stripe Connect, and they are separate from your formbase subscription and AI credit purchases.

To accept respondent payments, you must connect your own Stripe account to formbase. You are solely responsible for creating, verifying, and maintaining that Stripe account, for complying with Stripe’s Connected Account Agreement and other applicable Stripe terms, and for meeting any identification, tax, and regulatory requirements Stripe imposes on you.

For respondent payments, you are the merchant of record. formbase is not a party to the transaction between you and your respondent, does not sell your goods or services, does not handle the funds, and does not issue receipts or invoices on your behalf. Funds are processed by Stripe and settled to your connected Stripe account, subject to Stripe’s fees, holds, and payout schedule.

As the merchant for these transactions, you are responsible for:

  • Describing accurately what the respondent is paying for, including price, currency, and any recurring terms.
  • Charging, collecting, reporting, and remitting any applicable taxes on the respondent’s payment.
  • Honoring the goods, services, or commitments the respondent has paid for.
  • Handling refunds, chargebacks, disputes, customer support, and any consumer law obligations toward your respondents.
  • Complying with all laws that apply to your business, including anti-money-laundering, sanctions, and sector-specific regulations.

For data protection purposes, Stripe acts as an independent controller for the payment data it processes. formbase’s ability to offer respondent payments depends on its ongoing compliance with Stripe’s platform agreement; if that relationship changes, the availability of Payment fields may be affected without notice. We are not liable for Stripe’s availability, fees, fund holds, account suspensions, or disputes between you and a respondent. You agree to indemnify formbase against claims, losses, and expenses arising from your use of respondent payments, except to the extent caused by our own breach of these Terms.

formbase does not currently charge a platform fee on respondent payments.

15. Service Availability and Modifications

formbase does not offer a formal service level agreement (SLA). Uptime is best-effort; we cannot guarantee that the Service will be uninterrupted, error-free, or available at any specific time.

From time to time we will perform maintenance, which may occur without advance notice.

formbase reserves the right to modify, suspend, or discontinue any part of the Service — including individual features, integrations, plans, and limits — at any time, with or without notice, and with or without liability to you, except as required by applicable law. Minor changes, performance improvements, and bug fixes may be deployed at any time.

Some features are clearly labelled as beta, preview, or experimental. These are offered “as is” and may change, break, or be withdrawn without notice. You should not rely on beta features for production workflows or business-critical use, and any data, configurations, or behaviour tied to a beta feature may be reset when the feature graduates or is removed.

16. AI Features and Outputs

formbase includes AI-powered capabilities, including AI-assisted form building, AI chat for analysing submissions, and the AI skill picker. These features are powered by AWS Bedrock models, and the providers we use may change over time as we improve quality, latency, and cost. Any change of AI provider constitutes a new subprocessor and will be notified in accordance with Section 19 and the Data Processing Agreement.

AI outputs are generated probabilistically and can be inaccurate, incomplete, biased, outdated, or misleading. You are responsible for reviewing every AI-generated output before relying on it, publishing it, sending it to respondents, or using it to make decisions. Do not treat AI suggestions as legal, medical, financial, or other professional advice. You remain solely responsible for the forms you publish and any decisions you make based on AI output.

When you use AI Features, the prompts you submit and the relevant context from your account (such as form structure or submission samples you explicitly share with the AI) are sent to Amazon Bedrock for processing. We configure it so that, under the AWS Service Terms governing Amazon Bedrock, your inputs and outputs are:

  • Not used to train any AWS or third-party foundation models;
  • Not stored by AWS after the request is processed, and handled in accordance with the AWS Service Terms and Amazon Bedrock data-protection commitments; and
  • Processed in line with the security and data protection commitments described in our Privacy Policy and Data Processing Agreement.

Where AI processing transfers your data outside the European Economic Area, formbase relies on the safeguards set out in Section 10 of the Data Processing Agreement, including Standard Contractual Clauses adopted under Decision (EU) 2021/914 and, where applicable, the EU–US Data Privacy Framework.

You should not submit personal data, secrets, or other sensitive information through AI Features unless you have a lawful basis to share that information with AWS and have considered the risks. We do not control how AWS responds to lawful government requests directed at it.

The prohibited uses in Section 7 apply to AI Features. You must not attempt to reverse-engineer the underlying models, extract their weights, or use the AI Features to build a competing product.

17. Third-Party Integrations

formbase connects to a range of third-party services so you can route submissions, sync data, and automate workflows. These integrations include messaging tools, webhook endpoints, automation platforms, spreadsheets, productivity suites, databases, and email providers. This Section 17 covers only third-party integrations that you optionally enable; the subprocessors formbase relies on to deliver the Service are described in Section 19 and the Data Processing Agreement, and you cannot opt out of them while using the Service.

Third-party services are operated independently and are not part of formbase. We do not control their availability, pricing, features, terms, privacy practices, or uptime, and we are not responsible for outages, changes, deprecations, or data loss on their side. If a third-party service changes its API or terms in a way that breaks an integration, we cannot guarantee continued functionality.

When you connect a third-party service, you authorise formbase to exchange data with that service on your behalf. You are responsible for reviewing and complying with the terms and acceptable use policies of every service you connect, and for ensuring you have the right to share the data you route through formbase. OAuth permissions you grant remain active until you revoke them, either inside formbase or in the third-party service.

If you use API keys or our MCP server to integrate formbase with your own systems or with AI agents, you are responsible for keeping credentials secret, rotating them when needed, and for all activity performed using those credentials. We may rate-limit, suspend, or revoke API keys and MCP access that show signs of abuse, security risk, or that violate these Terms.

18. Data Export and Portability

Your data belongs to you. While your account is active, you can export your forms and submissions at any time in standard formats, including CSV and Excel (XLSX), directly from the formbase application. There is no limit on how often you can export your own data.

Cancelling a Pro subscription does not delete your data; you keep access on the free tier subject to the free tier’s limits. If you close your account, the account and its forms and submissions are removed from active systems and remain in our providers’ backups only until the corresponding backup window expires, as described in the Privacy Policy. We strongly recommend exporting any data you need before closing your account.

If you are a Workspace owner and you close your account, the Workspace and all its associated forms, submissions, and data will be scheduled for deletion. Members’ own accounts are not affected by a Workspace owner closing their account.

19. Privacy and Data Processing

How we collect, use, store, and share personal data is described in our Privacy Policy, which forms part of these Terms by reference.

For data submitted to your forms by respondents, you are the data controller and formbase acts as your data processor. This means you decide what personal data to collect, why, and on what legal basis, and we process that data on your behalf and on your documented instructions. The terms of that processing relationship, including subprocessors, security measures, and international transfers, are set out in our Data Processing Agreement, which applies automatically to customers subject to the GDPR or equivalent regimes.

For data we collect about you as a formbase user, such as your account details, billing information, and usage of the product, formbase is the data controller. We process this data to provide and improve the Service as described in the Privacy Policy.

formbase handles personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Norwegian data protection law. If you have questions about how your data or your respondents’ data is handled, or if you need to exercise data subject rights, contact us at support@formbase.so. In the event of a personal data breach affecting your account, formbase will notify you in accordance with Section 11 of the Data Processing Agreement, which sets out our notification obligations and timelines.

Subprocessors

formbase relies on a small set of trusted third-party providers (“subprocessors”) to deliver the Service. These subprocessors process personal data on our behalf only as needed to provide their part of the Service, under contracts that require appropriate confidentiality and security measures. The current core subprocessors include:

  • Convex — application database and backend.
  • Cloudflare R2 — object storage for file uploads and signatures.
  • Cloudflare — CDN, DNS, edge security, custom hostnames, and Turnstile bot protection.
  • Polar — subscription billing and AI credit purchases (Merchant of Record; independent controller for buyer billing data).
  • Stripe — respondent payment processing via Stripe Connect (independent controller for payment data).
  • Amazon Web Services (AWS) — Amazon Bedrock for AI Features; Amazon SES for transactional and system emails, including abandoned-response reminders on Pro workspaces.
  • Axiom — operational logs and monitoring.
  • PostHog — analytics for our website and account sign-ups.
  • Unsplash — image search API; selected images are stored in Cloudflare R2 and served from there.

The authoritative list of subprocessors — with data categories and regions — is in our Data Processing Agreement. Changes to subprocessors are handled in accordance with Section 9 of the Data Processing Agreement.

20. Intellectual Property

formbase, including its software, source code, user interface, design system, illustrations, documentation, brand name, logos, and other trademarks, is owned by formbase and protected under Norwegian and international intellectual property laws. All rights not expressly granted to you in these Terms are reserved.

Subject to your compliance with these Terms, formbase grants you a limited, non-exclusive, non-transferable, non-sublicensable, and revocable licence to access and use the Service for your internal business or personal purposes during the term of your account. This licence does not permit you to copy, modify, reverse engineer, decompile, resell, sublicence, or create derivative works based on the Service, except to the extent such restrictions are prohibited by mandatory law.

You must not remove, obscure, or alter any proprietary notices on the Service, and you must not use formbase’s name, logos, or other brand assets except as expressly permitted in writing or as needed to refer to the Service in accordance with applicable law.

Nothing in this Section 20 affects the rights you retain in Your Content, as described in Section 8.

21. Feedback

If you choose to send formbase ideas, suggestions, feature requests, bug reports, or any other feedback regarding the Service (“Feedback”), you agree that such Feedback is non-confidential and that formbase may use, reproduce, modify, distribute, and commercialise the Feedback for any purpose, without restriction, attribution, or obligation to compensate you. You waive any rights in the Feedback that would prevent formbase from exercising the foregoing, to the extent permitted by applicable law, including moral rights under the Norwegian Copyright Act (Åndsverkloven) and equivalent laws in other jurisdictions. You are not required to provide Feedback, and submitting Feedback does not grant formbase any rights in Your Content beyond those described in Section 8.

22. Termination by You

You may cancel your subscription or close your account at any time through your account settings or by contacting support@formbase.so. See Section 13 for cancellation and refund terms and Section 18 for data handling after closure.

23. Termination and Suspension by formbase

formbase may suspend or terminate your access to the Service, in whole or in part, at our sole discretion, with or without cause, and with or without notice, except where mandatory consumer protection law requires otherwise. For consumers on a paid subscription, termination without cause will not take effect before the end of the current paid billing period, and any prepaid fees for the unused remainder of that period will be refunded. Reasons may include:

  • You materially breach these Terms or any policy incorporated by reference;
  • You fail to pay fees when due and the failure is not remedied after reasonable notice;
  • Your use of the Service creates a security, legal, or operational risk to formbase, its users, or third parties;
  • formbase is required to do so by law, regulation, or a binding order from a competent authority; or
  • formbase ceases to offer the Service or a specific feature.

Where the circumstances permit, formbase will give you advance notice of suspension or termination and a reasonable opportunity to cure the issue. In cases involving abuse, illegal activity, security incidents, or risk of harm, formbase may act immediately and without prior notice.

Following termination, formbase will handle your data in accordance with the Privacy Policy. Provisions that by their nature survive termination remain in effect, including Section 8 (Your Content and ownership), Section 20 (intellectual property), Section 21 (feedback), Section 24 (warranty disclaimer), Section 25 (limitation of liability), Section 26 (indemnification), and Section 27 (governing law and dispute resolution).

24. Warranty Disclaimer

To the maximum extent permitted by applicable law, the Service is provided on an “as-is” and “as-available” basis, without warranties of any kind, whether express, implied, or statutory. formbase specifically disclaims all implied warranties of merchantability, fitness for a particular purpose, non-infringement, accuracy, reliability, and any warranty arising out of course of dealing or usage of trade.

formbase does not warrant that the Service will be uninterrupted, error-free, secure against all threats, free of viruses or harmful components, or that defects will be corrected. You acknowledge that the Service depends on third-party infrastructure, networks, and services outside formbase’s full control.

Nothing in this section limits warranties or rights that cannot be excluded under mandatory Norwegian or EU consumer protection law.

25. Limitation of Liability

To the maximum extent permitted by applicable law, in no event will formbase be liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, including loss of profits, revenue, goodwill, data, business opportunities, or anticipated savings, even if formbase has been advised of the possibility of such damages.

formbase’s total aggregate liability arising out of or relating to these Terms or your use of the Service, whether in contract, tort (including negligence), statute, or otherwise, will not exceed (a) for users on a paid plan, the total fees paid for your formbase Subscription and AI credit purchases through Polar as Merchant of Record during the twelve (12) months immediately preceding the event giving rise to the liability; or (b) for users on a free plan, one hundred euros (EUR 100). Any platform fee that formbase may charge on respondent payments is treated as fees paid to formbase for the purposes of calculating the cap in clause (a). The cap in clause (b) does not apply to liability that cannot be limited under mandatory Norwegian or EU consumer protection law, including liability towards a consumer for damage caused by formbase’s gross negligence, wilful misconduct, or a personal data breach attributable to formbase, or liability to any data subject under Article 82 GDPR.

formbase is not liable for any failure or delay in performance caused by events beyond its reasonable control, including acts of God, natural disasters, war, terrorism, civil unrest, labour disputes, governmental action, internet or telecommunications failures, power outages, or failures of third-party infrastructure or services (“Force Majeure”).

Nothing in this section limits or excludes liability that cannot be limited or excluded under mandatory law, including liability for death or personal injury caused by negligence, fraud, fraudulent misrepresentation, gross negligence, wilful misconduct, or a personal data breach attributable to formbase, or liability owed to you as a consumer under mandatory Norwegian or EU consumer protection law.

26. Indemnification

To the extent permitted by applicable law, you agree to defend, indemnify, and hold harmless formbase and its officers, employees, contractors, and agents from and against any third-party claims, demands, actions, losses, damages, liabilities, costs, and expenses (including reasonable legal fees) arising out of or relating to:

  • Your Content, including any claim that Your Content infringes third-party rights, violates law, or causes harm to a respondent or other person;
  • Your use of the Service in breach of these Terms or applicable law;
  • Your violation of any rights of a third party, including privacy, intellectual property, or contractual rights; or
  • Your responsibilities as a data controller for submissions you collect through the Service.

This indemnity does not apply to the extent the claim arises from formbase’s own negligence, wilful misconduct, or breach of these Terms. If you are a consumer, this section applies only to the extent permitted by mandatory consumer protection law, and nothing in this section limits your statutory rights.

formbase will notify you of any claim for which it seeks indemnification.

27. Governing Law and Dispute Resolution

These Terms and any dispute or claim arising out of or in connection with them, their subject matter, or formation (including non-contractual disputes or claims) are governed by and construed in accordance with the laws of Norway, without regard to its conflict of laws principles.

Subject to the mandatory consumer-protection carve-outs in this Section 27, the parties agree that the Oslo District Court (Oslo tingrett) has jurisdiction to settle any dispute arising out of or in connection with these Terms or the Service.

If you are a consumer resident in the European Economic Area, the choice of law and forum above does not deprive you of the protection of mandatory consumer protection laws of the country in which you are habitually resident. You retain the right to bring proceedings against formbase, and may be sued by formbase, only in the courts of the country in which you are habitually resident.

If you are a consumer resident outside the European Economic Area, mandatory consumer protections of the country in which you are habitually resident may also apply, in which case the choice of law and forum above does not override those protections to the extent they cannot lawfully be waived.

Before initiating formal proceedings, you agree to first attempt to resolve any dispute informally by contacting formbase at support@formbase.so.

formbase is not obliged to participate in alternative dispute resolution before a consumer dispute resolution body, but will consider such requests in good faith. If you are a consumer resident in Norway, you may bring a complaint to the Norwegian Consumer Authority (Forbrukertilsynet, forbrukertilsynet.no) or the Norwegian Consumer Council (Forbrukerrådet, forbrukerradet.no). If you are a consumer resident in the European Union, you may also contact the European Commission’s consumer redress portal (accessible at consumer-redress.ec.europa.eu) for guidance on dispute resolution options in your country.

28. General Provisions

Changes to These Terms

formbase may update these Terms from time to time to reflect changes in the Service, legal or regulatory requirements, or business practices. For material changes, formbase will give you reasonable advance notice before the changes take effect. Your continued use of the Service after the effective date constitutes your acceptance of the updated Terms. If you do not agree to the changes, you may terminate your account before they take effect, as described in Section 22.

Entire Agreement

These Terms, together with the Privacy Policy and any other policies or supplemental terms expressly incorporated by reference, constitute the entire agreement between you and formbase regarding the Service, and supersede any prior or contemporaneous agreements, communications, or proposals on the same subject matter.

Severability

If any provision of these Terms is held to be invalid, illegal, or unenforceable by a court of competent jurisdiction, that provision will be enforced to the maximum extent permissible and the remaining provisions will continue in full force and effect.

No Waiver

formbase’s failure to enforce any right or provision of these Terms does not constitute a waiver of that right or provision. Any waiver must be in writing and signed by an authorised representative of formbase to be effective.

Assignment

You may not assign, transfer, or delegate these Terms or any of your rights or obligations under them, in whole or in part, without formbase’s prior written consent. Any attempted assignment in breach of this section is void. formbase may freely assign or transfer these Terms, in whole or in part, including in connection with a merger, acquisition, reorganisation, sale of assets, or by operation of law, provided that the assignee is bound by these Terms and your rights under them are not materially diminished. If you are a consumer, formbase will give you reasonable advance notice before such an assignment takes effect, and you may terminate your account if you do not accept the assignment.

Notices

formbase will provide notices to you by email to the address associated with your account, through the Service interface, or by other reasonable means. You are responsible for keeping your contact information accurate and up to date. You must send legal notices to formbase by email to support@formbase.so, and such notices are deemed received on the earlier of acknowledgement by formbase or three (3) business days after sending.

Language

These Terms are written in English, which governs in any conflict with a translation, except where mandatory consumer protection law requires otherwise.