Privacy Notice for AiML Forms

1. Who We Are

AiML Forms is a product of Whisper AiML Inc. This Privacy Notice explains how AiML Forms collects, uses, stores, and shares information when people use the AiML Forms website, form builder, invitation tools, public forms, dashboards, storage features, SMS/MMS alert tools, Google sign-in, and related services.

AiML Forms is operated by Whisper AiML Inc., 8 The Green, Suite A, Dover, Delaware 19901, United States. For privacy questions, contact privacy@aimlforms.com.

2. Information We Collect

We collect and process the categories of information listed below.

• Account information such as email addresses, Google sign-in identifiers, phone-based login details, session metadata, and account preferences.
• Form and invitation content, including names, descriptions, intended use, fields, public links, private dashboard links, uploaded images, event details, RSVP options, poll questions, and hotel-room answers.
• Submission and response data that respondents enter into customer forms or invitation pages when storage or dashboard features are enabled.
• SMS/MMS data needed to send alerts or invitation messages, including selected alert fields, destination phone numbers, delivery status, provider message identifiers, opt-out signals, and sender assignment data.
• Location search inputs and place suggestions used to help create invitation locations when you use location tools powered by Google Places.
• Billing metadata handled through Stripe, including checkout session, subscription, invoice, payment status, and paid feature identifiers.
• Usage, device, diagnostic, and abuse-review information such as event type, timestamp, limited metadata, browser user agent, rate-limit signals, and hashed or truncated IP-derived signals.
• Support and communication records when you email us, request help, or receive service notices.

3. Google User Data We May Access

If you sign in with Google, AiML Forms may access Google user data only as needed to authenticate you and provide the features you request.

This can include the following, depending on the permissions you grant:

• Basic Google account information such as your email address, profile identifier, and verification status.
• Transient OAuth access tokens used only to request your Google profile during sign-in.
• Location search text and place suggestion data when you use Google-powered location autocomplete.

AiML Forms does not request access to Gmail, Google Drive, Google Calendar, Google Contacts, or other Google Workspace content for its current form and invitation workflows.

We do not sell Google user data. We do not use Google Workspace API data for advertising or to develop, improve, or train generalized AI or ML models.

4. How We Use Information

• Provide, maintain, secure, and improve AiML Forms.
• Publish forms and invitations, store responses, show customer dashboards, and support form and invite workflows.
• Process paid storage, SMS alert, and invitation checkouts through Stripe.
• Send SMS/MMS messages, alerts, RSVP links, delivery-status updates, and opt-out confirmations through messaging providers.
• Send account and service emails, including magic links and operational notices.
• Track usage, investigate abuse, prevent spam, protect the service, and enforce our terms and acceptable use rules.
• Comply with legal, tax, payment, carrier, provider, and security obligations.

For Google-related features, we use information only for these user-facing purposes:

• Authenticate you with Google and connect your verified Google email address to your AiML Forms account.
• Read basic Google profile information, such as email address and profile identifier, only as needed to complete Google sign-in.
• Provide Google-powered place autocomplete when you search for an invitation or event location.
• Maintain security, prevent abuse, troubleshoot sign-in or location-suggestion issues, and provide customer support.
• Improve and maintain user-facing form, invitation, dashboard, and messaging functionality.

We do not use Google user data for targeted advertising, interest-based advertising, data brokerage, resale, credit-worthiness, lending, or unrelated database building.

5. Storage, Security, and Retention

We use commercially reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, or alteration.

These safeguards include encryption in transit, access controls, environment-based secrets management, limited personnel access for support or operational needs, and security review for abuse-prone workflows.

AiML Forms keeps data for as long as needed to provide the service, support paid subscriptions, meet legal obligations, resolve disputes, prevent abuse, and maintain business records.

Google OAuth access tokens are used transiently during sign-in and are not stored as long-term connected-account tokens. Account email addresses, sessions, and related login records may be retained as needed to provide the service and protect account security.

6. How We Share Information

We do not sell personal information or Google user data.

We may share information only in the following circumstances:

• Service providers that host, secure, monitor, store, message, email, analyze, or support AiML Forms, subject to confidentiality and security obligations.
• Customers, respondents, invite recipients, or dashboard users when sharing is part of the form, RSVP, invitation, SMS/MMS, or dashboard workflow intentionally used.
• Payment, carrier, messaging, and compliance providers when necessary to process billing, send messages, register senders, prevent abuse, or comply with provider rules.
• Law enforcement, regulators, courts, or other parties when required by law, legal process, or to protect rights, safety, and the integrity of the service.
• A buyer, investor, or successor in connection with a merger, financing, acquisition, or sale of assets, subject to applicable legal protections.

We do not transfer Google user data to third parties except as necessary to provide or secure AiML Forms, comply with law, or complete a workflow you requested. We do not transfer Google user data for advertising, resale, data brokerage, or other unrelated commercial purposes.

7. Human Access to Data

Authorized personnel may access information, including Google user data, only when necessary for support, security, abuse prevention, troubleshooting, legal compliance, or other operations directly related to providing AiML Forms.

8. Customer and Respondent Choices

• Customers can manage forms, invitation campaigns, dashboards, submitted data, storage settings, SMS alert settings, and paid features inside AiML Forms.
• Respondents who want access to, correction of, or deletion of information submitted to a customer form should contact the customer that created the form.
• You can remove AiML Forms access from your Google Account permissions, or stop using Google sign-in and contact us for account help.
• You can request account or associated data deletion by contacting privacy@aimlforms.com.

You can also review the Terms of Service, Subscription Terms, and Acceptable Use Policy.

9. Changes to This Notice

We may update this Privacy Notice from time to time. If we make material changes to how we access, use, store, or share Google user data, we will update this page and, where appropriate, provide notice within the service.

10. Contact Us

Whisper AiML Inc.
8 The Green, Suite A
Dover, DE 19901
United States

Service questions: info@aimlforms.com
Privacy questions: privacy@aimlforms.com