Privacy Policy.

Who we are

FormVitals is a website monitoring service run from Australia. In this policy "we" and "us" means FormVitals. You can contact us about privacy at privacy@formvitals.com.

What we collect

If you join the waitlist or become a customer

1. Contact details: your name, email address, business name and website, and the phone number you give us for SMS alerts.
2. The websites you ask us to monitor: their addresses, the page with the form, and any settings you give us.
3. Check results: whether each site loaded, certificate and domain dates, email-setup records, accessibility issue counts, test outcomes, and screenshots of the form page when a test fails or needs attention.
4. Billing (once paid plans start): handled by our payment provider. We never see or store card numbers.

Test emails in our monitor inbox

To confirm a form works, we send a clearly labelled test through it and look for that test arriving in our monitor inbox. Each test contains a code starting with FV-TEST.

1. If you set up the recommended inbox filter, only emails containing that code are forwarded to us, so we never receive your customers' real enquiries.
2. If you choose to BCC us on your form instead, copies of real enquiries will also arrive in our inbox. Our software only searches for the test code. We don't read, use or share other messages, and we delete them within 30 days.

Business contacts we find for outreach

To tell businesses about FormVitals, we collect business email addresses that a business has published on its own website, together with the page where we found the address and the date. We only use them to send a small number of relevant business emails. Every email says who we are and lets you unsubscribe. If you unsubscribe, we keep your address only on a do-not-contact list so we never email you again.

Public website information

Our checks read public information about websites: whether a page loads, its security certificate, its domain registration date, and its public email DNS records (SPF, DKIM, DMARC). We never submit a form on a website unless its owner, or the agency that manages it with the owner's permission, has asked us to.

Why we use it

To run the monitoring you asked for, send your alerts and reports, support you, keep the service secure, and contact businesses about FormVitals as described above. We don't sell personal information or use it for advertising.

Who else sees it

If you're an agency, reports can go out under your brand to your own clients. We use trusted providers to run the service, and each processes data only on our instructions:

1. Hosting and storage for our monitoring software and results.
2. Email for our monitor inbox and for sending alerts and reports.
3. SMS for text alerts, if you give us a mobile number.
4. Netlify, which hosts this website and stores waitlist sign-ups.
5. Payments, once paid plans start.

Some of these providers may store data outside Australia. We'll list each provider by name here before paid plans launch.

Security

Data is encrypted in transit. Access is limited to what's needed to run and support the service. If a data breach is likely to cause serious harm, we'll notify you and the Office of the Australian Information Commissioner (OAIC), as the Notifiable Data Breaches scheme requires.

How long we keep it

We keep customer data while your account is active and delete it within 90 days after you leave, unless the law requires us to keep it longer. Test emails and non-test messages in the monitor inbox are deleted within 30 days. Outreach contacts who don't reply are deleted within 12 months.

Your rights

You can ask to see, correct or delete the personal information we hold about you by emailing privacy@formvitals.com. We'll respond within 30 days. If you're not happy with our response, you can complain to the OAIC.

Cookies

This website doesn't use advertising cookies or tracking scripts.

Changes

We'll post any changes here and update the version date at the top. If a change is significant, we'll email our customers about it.