Privacy Policy
Last updated: February 13, 2026
1. Data Controller
WatermelonTech SRL ("we", "us", or "our") is the Data Controller for the personal information collected through the BForms platform. We are a company registered in Romania (EU) and are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR).
Registration Code: RO48895393
Address: Alexandru Obregia 8, Sector 4, Bucharest, Romania
Email: watermelontech.dev@gmail.com
2. Data Collection & Legal Basis
We collect data to provide the Service. Under GDPR Article 6, we rely on specific legal grounds for processing your data:
| Data Type | Legal Basis |
|---|---|
| Account Info (Email, Name) | Contractual Necessity (to provide the Service) |
| Billing Data (via Creem) | Legal Obligation (Tax/Accounting) & Contract |
| Usage Logs | Legitimate Interest (Security & Service Improvement) |
| Marketing Consent | Consent (Explicit Opt-in) |
3. Payment Information
Important: We do not collect, store, or process your credit card numbers or financial details on our servers.
We partner with Creem.io, an authorized reseller and Merchant of Record, to handle all billing and subscriptions. When you subscribe to a paid plan, you interact directly with Creem.io. We share only your email address and a unique user ID with them to link the payment to your BForms account. Their handling of your financial data is governed by the Creem.io Privacy Policy.
4. Service Providers (Sub-processors)
We engage trusted third-party service providers to help us operate BForms. Your data is stored on servers located within the EU.
| Provider | Purpose | Location |
|---|---|---|
| Hetzner | Hosting & Infrastructure | EU (Germany / Finland) |
| Creem.io | Payments & Subscriptions | EU / Global |
5. Security of Data
The security of your data is important to us. We implement industry-standard security measures, including:
- Encryption: All data is encrypted in transit (via SSL/TLS) and at rest within our database.
- Access Control: Access to personal data is restricted to authorized personnel who need it to operate the Service.
- Authentication: We use secure, token-based authentication to protect your account.
No method of transmission over the Internet is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee its absolute security.
6. Marketing Communications
We only send marketing emails (newsletters, product updates) if you have explicitly opted in to receive them. You have the right to withdraw your consent at any time by clicking the "Unsubscribe" link in any marketing email or by contacting us.
7. Data Retention and Backups
- Active Accounts: We retain your data for as long as your account remains active.
- Deleted Accounts: If you delete your account, your personal data is removed from our live production database within 30 days of your request, except where we are required to retain it for legal purposes.
- Backups: To prevent accidental data loss, we maintain encrypted backups. Data from deleted accounts may persist in these secure archives for up to 30 days before being overwritten.
8. Your Rights (GDPR)
As a resident of the EU/EEA, under the GDPR you have the right to:
- Access: Request a copy of the data we hold about you.
- Rectification: Correct inaccurate data via your account settings or by contacting us.
- Erasure: Request the deletion of your account and associated data ("Right to be Forgotten").
- Portability: Request your data in a machine-readable format.
- Objection: Object to processing based on legitimate interests.
- Lodge a complaint: You have the right to lodge a complaint with the Romanian data protection authority (ANSPDCP) at www.dataprotection.ro.
To exercise any of these rights, please contact us at watermelontech.dev@gmail.com.
9. Children's Privacy
Our Service is not directed to anyone under the age of 16. We do not knowingly collect personally identifiable information from anyone under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us and we will take steps to remove that information from our servers.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.
11. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at:
Email: contact@bforms.dev