Privacy Policy

1. Introduction

Welcome to ToWebForm ("we,""our," or"us"), operated by Foresight Technologies LLC. ToWebForm is a B2B Software-as-a-Service (SaaS) platform that utilizes artificial intelligence to assist merchants, municipalities, and businesses ("Merchants") in converting legacy PDF documents into accessible webforms.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (towebform.com) and use our services.

2. Information We Collect

We collect information that identifies, relates to, describes, or could reasonably be linked with you ("Personal Information"). We collect this in three primary contexts:

A. Account and Authentication Data

When you register for ToWebForm, we collect:

• Google OAuth Data: If you authenticate using Google, we securely receive your name, email address, and profile picture. We do not access your Google Drive, Gmail, or any other Google services outside of basic profile authentication.
• Billing Information: Processed securely via our third-party payment processors. We do not store full credit card numbers on our servers.

B. Merchant Content & AI Processing Data

When utilizing our platform, Merchants upload content that we process:

• Legacy Documents: PDF files uploaded for conversion.
• Form Configurations: Manual accessibility overrides, ARIA label configurations, styling, and structural logic.
• Infrastructure Settings: Webhook URLs, signing secrets, and API integration configurations.

C. End-User Form Submissions (Data Processing Role)

When a Merchant publishes a form, their end-users (e.g., citizens, customers) may submit Personal Information into that form.

• Our Role: For this data, ToWebForm acts strictly as a Data Processor (or Service Provider). We route this data according to the Merchant's instructions (e.g., via secure webhooks).
• SMS Consent and Phone Numbers: We value your privacy. No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
• Merchant Liability: The Merchant acts as the Data Controller. The Merchant is entirely responsible for ensuring they have the legal right to collect this data and for responding to end-user privacy requests.

3. How We Use Your Information

We use the information we collect to:

• Authenticate your account and maintain session security.
• Provide the core service of AI-driven PDF document parsing and webform generation.
• Route end-user form submissions to your designated enterprise systems via webhooks.
• Provide customer support and send administrative notices.
• Log webhook delivery statuses for your exportable audit logs.

4. Google API Services User Data Policy (Limited Use)

ToWebForm allows you to sign in using your Google account. We strictly adhere to Google's data privacy requirements:

• Limited Use: ToWebForm's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
• Data Access: We only request the minimum required scopes (openid, email, profile) to authenticate your identity.
• No Reselling: We do not sell, rent, or trade your Google user data to any third party.

5. Artificial Intelligence & Third-Party Sharing

To provide our document conversion features, we utilize enterprise-grade Large Language Models (LLMs).

• Zero Training Policy: Data, PDFs, and text extracted from Merchant uploads are strictly used for structural mapping and generation. Your data is not used to train our base AI models or any third-party foundation models.
• Third-Party Service Providers: We share necessary data with infrastructure partners (e.g., our database hosting, edge function providers, third-party communication providers, and payment gateways) solely for the purpose of operating the application. These providers are bound by strict confidentiality agreements.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Service and hold certain information. We use session cookies to keep you logged in and authenticated. We also use analytics providers (such as Vercel Analytics) to collect anonymous usage data to help us improve the platform. You can instruct your browser to refuse all cookies, but this may prevent you from using some parts of our Service.

7. Data Security and Retention

We implement commercially reasonable security measures, including HMAC-SHA256 signatures for webhook dispatching and Row Level Security (RLS) in our database, to protect against unauthorized access.

• Account Data: Retained for as long as your account is active.
• End-User Submissions: Webform submission payloads are temporarily processed and/or logged solely for transmission to the Merchant's designated endpoints. Merchants have full control over the retention and deletion of their form data within their dashboards.

8. International Data Transfers

ToWebForm is based in the United States. If you are accessing our Services from outside the United States, please be aware that your information may be transferred to, stored, and processed by us in our facilities and by those third parties with whom we may share your personal information, in the United States. By using our Services, you consent to this transfer.

9. Children's Privacy

Our Service is intended for businesses and professionals. It is not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that a child under 16 has provided us with personal information, we will take steps to delete such information.

10. Your Privacy Rights

Depending on your jurisdiction (including Nevada state privacy laws), you may have the right to:

• Request access to the Personal Information we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated Personal Information.
• Opt-out of marketing communications.

To exercise these rights, or to request the complete deletion of your ToWebForm account, please contact us at the email below.

11. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact our support team:

Foresight Technologies LLC
Email: Support@ToWebForm.com