1. What this policy covers

This policy explains how Iterate AI collects, stores, uses, and protects data when you create, publish, or submit forms through the platform.

2. Data we collect

We may collect account details (such as email), organization branding assets, form definitions, form responses, notification preferences, submission metadata, and usage logs required for operating the service.

3. How we use data

Data is used to provide core product features: authentication, form generation and editing, submission capture, waitlist and capacity handling, AI analysis, and email notifications.

4. Infrastructure and processors

Iterate AI uses Supabase for database, authentication, and storage, Gemini services for AI-powered generation and analysis workflows, and Resend for email delivery. These providers process data only as needed to deliver product functionality.

5. Storage and retention

Form and submission data is retained while your workspace remains active, unless you request deletion. Support-related data may be retained for troubleshooting, abuse prevention, and service reliability.

6. Sharing and disclosure

We do not sell personal information. Data may be shared with infrastructure providers and email processors strictly to operate the service, comply with legal obligations, or protect platform safety.

7. Security measures

We use access controls, authenticated requests, and storage policies designed to restrict access to authorized users. No system is perfect, and users should avoid storing highly sensitive data in forms unless required controls are in place.

8. Your choices

Workspace owners can update or delete form content, control publishing state, and manage notification settings. For account and data requests, contact support.

9. Contact

Privacy and support requests: samabuzarifa@gmail.com