Terms of Service

1. Introduction & Acceptance of Terms

Welcome to SimplyForms, a product of Simplyxity Ltd. These Terms of Service ("Terms") govern your access to and use of the SimplyForms platform, our website at https://simplyforms.dev, and all related services (together, the "Service").

By creating an account or using the Service, you agree to be bound by these Terms and to our Privacy Policy. If you use the Service to process personal data of end users, our Data Processing Agreement is also incorporated into these Terms by reference.

If you do not agree, you must not access or use the Service. If you are using the Service on behalf of an organisation, you represent that you have authority to bind that organisation to these Terms.

2. Definitions

• "Service" means the SimplyForms platform, including the website, dashboard, API, and all associated features.
• "User" (or "you") means any individual or entity that registers for and uses the Service.
• "Account" means your registered SimplyForms account, including all associated settings, data, and credentials.
• "Form" means a form endpoint created by a User through the Service, which generates a unique URL for receiving submissions.
• "Submission" means any data sent to a Form endpoint by an End User.
• "Workspace" means an organisational unit within a Team used to group and manage Forms.
• "Team" means a group of Users collaborating under a shared account with role-based access control.
• "Content" means any data, text, configuration, or material that you create, upload, or submit through the Service.
• "End User" means any individual who submits data through a Form created by a User. End Users are not required to have a SimplyForms account.
• "We", "us", or "our" refers to Simplyxity Ltd, the company that operates SimplyForms.

3. Account Registration & Security

To use the Service, you must create an account using a valid email address and password. We offer multi-factor authentication (MFA) via time-based one-time passwords (TOTP) and strongly encourage you to enable it.

When creating and using your account, you agree that:

• You must be at least 16 years old to create an account.
• You represent that you are using the Service for business, professional, or developer purposes, and not as a consumer within the meaning of the Consumer Rights Act 2015 (or equivalent legislation in your jurisdiction).
• You will provide accurate and complete information during registration and keep it up to date.
• Each account is for a single individual. Do not share credentials — use Team features to grant access to collaborators.
• You are responsible for all activity that occurs under your account and for keeping your credentials secure.
• You must notify us immediately at support@simplyforms.dev if you suspect unauthorised access to your account.

4. Service Description

SimplyForms is a developer-friendly form-building platform that allows you to:

• Create form endpoints in the dashboard, each with a unique URL.
• Receive, store, and manage form Submissions through a web dashboard.
• Generate a draft field schema from a natural-language description, using our AI form-generation feature, subject to the monthly per-plan generation quotas published on the pricing page. The feature sends your design prompt to Google's Vertex AI service; see the Privacy Policy for the data-flow disclosure.
• Receive email notifications when new Submissions arrive.
• Organise Forms into Workspaces within Teams, with role-based access control.
• Export Submission data as CSV or JSON.
• Connect to external services via webhooks, where available on your plan.
• Attach files to Submissions, where available on your plan, subject to per-plan size limits and a maximum of five files per Submission.

The current set of features included on each plan is published on the pricing page, which is the authoritative source for what each plan includes.

5. Acceptable Use Policy

You agree to use the Service only for lawful purposes and in accordance with these Terms. You must not:

• Use the Service to send spam, phishing messages, or unsolicited communications.
• Create forms designed to collect data unlawfully or without proper consent from End Users.
• Scrape, crawl, or use automated tools to extract data from the Service without written authorisation.
• Attempt to disrupt, overload, or attack the Service, including through denial-of-service activity.
• Reverse engineer, decompile, or disassemble any part of the Service, except where such restriction is prohibited by law.
• Resell, sublicense, or redistribute the Service or access to it without our prior written consent.
• Impersonate any person or entity, or misrepresent your affiliation with any person or entity.
• Use the Service to facilitate any activity that violates applicable laws or regulations, including the UK Computer Misuse Act 1990.

We reserve the right to investigate and take appropriate action against anyone who violates this policy, including suspending or terminating the relevant Account.

6. Prohibited Data

You must not collect, transmit, or store the following categories of data through the Service unless you have a separate written agreement with us that specifically permits it:

• Payment-card numbers, CVV codes, or other data subject to PCI DSS.
• Passwords, secrets, API keys, or other credentials.
• Regulated health information, including data subject to HIPAA or the UK Data Protection Act 2018 health-data provisions.
• Special-category personal data under UK or EU GDPR (such as data revealing racial or ethnic origin, religious beliefs, sexual orientation, or biometric data for identification) — unless a separate written agreement with us specifically permits it and you have a lawful basis under Article 9 plus appropriate safeguards.
• Criminal-offence data.
• Personal data of children under 13 (or under 16 in the EEA).
• Any data the collection or use of which is unlawful in your jurisdiction or the End User's jurisdiction.

We may suspend or terminate Forms or Accounts where we reasonably believe — based on the Form’s configuration (field labels, Form name, recipient settings), file-upload metadata, abuse reports from End Users, or other lawful signals available to us without decrypting Submission contents— that they are being used to collect Prohibited Data without authorisation. We do not proactively read encrypted Submission payloads to enforce this clause.

7. Customer Content & Ownership

You own your data. All Content you create, upload, or collect through the Service remains your property. We do not claim ownership of your Forms, Submissions, or any other Content.

By using the Service, you grant Simplyxity Ltd a limited, non-exclusive, worldwide, royalty-free licence to host, store, transmit, display, and otherwise process your Content solely for the purpose of providing and improving the Service. This licence ends when you delete your Content or close your Account.

You are responsible for ensuring that:

• You have the right to collect, store, and process any data submitted through your Forms.
• Your Content does not infringe on any third party's intellectual property rights.
• Your Content complies with applicable laws and regulations.

You grant us the right to use anonymised and aggregated usage statistics (total submission counts, feature usage trends, performance metrics) to operate and improve the Service. These statistics will never identify you or your End Users. We do not use Submission content(the data your End Users submit through your Forms) for advertising, analytics, or AI/model training. Where you use the AI form-generation feature, your design prompt is sent to Google's Vertex AI service under the Google Cloud Data Processing Addendum — which contractually prohibits Google from using that prompt to train or improve its generally-available models — and the prompt is used solely to draft the requested field schema and to operate the feature (quota accounting, logging, and abuse prevention). See the Privacy Policy for the full data-flow disclosure.

Submission retention. Submissions are retained for the data-retention window of your active plan, as published in the Privacy Policy. Submissions older than the window are permanently deleted on a daily schedule, including any uploaded files. We send an email warning approximately seven days before Submissions become eligible for deletion. Plan downgrades trigger a 30-day grace period before the shorter retention window applies. You are responsible for exporting any data you wish to keep beyond your plan's retention window.

8. Customer as Controller; DPA

When you create Forms that collect data from End Users, you act as the data controller for that data. SimplyForms acts as a data processor on your behalf, processing Submission data according to your instructions (storing, transmitting, and displaying it through the Service).

Our processor obligations are set out in our Data Processing Agreement, which is incorporated into these Terms by reference and applies automatically to every customer using the Service to process personal data. No separate signature is required.

As a data controller, you must:

• Have a clear, accessible privacy notice for End Users that explains what data you collect, how it is used, and how it is stored.
• Obtain appropriate consent from End Users where required by law.
• Comply with all applicable data protection laws, including UK GDPR, EU GDPR, CCPA/CPRA, and any other relevant legislation.
• Respond to End User data-subject requests in a timely manner.

We will assist you in fulfilling your data-protection obligations where reasonably possible, including by providing the data export and deletion tools within the dashboard.

9. Pricing, Billing & Payment

The available plans, their monthly submission limits, included features, and prices are published on the pricing page, which is the authoritative source. By subscribing to a paid plan, you agree to be charged the price stated at checkout for the billing period you select.

Payment processing

Payment processing is handled by Stripe Payments Europe Ltd and its affiliates. Card numbers are entered directly into Stripe's hosted checkout and are not visible to us. By subscribing, you also agree to Stripe's applicable terms.

Taxes

Prices shown are exclusive of applicable VAT, GST, or sales tax. Stripe calculates and adds applicable tax at checkout based on your billing address. A valid Tax ID can be entered at checkout and will appear on the resulting invoice.

Price changes

We may change the prices for paid plans from time to time. We will give you at least 30 days' notice before any price change takes effect, by email and/or in-app notification. If you do not agree with the new pricing, you may cancel your subscription before the change takes effect.

Refunds

We do not offer refunds for partial billing periods. If we materially reduce the functionality of a plan you have already paid for, we will offer a pro-rated refund of the affected period.

Failed payments & suspension

If a scheduled payment fails, your subscription enters a past-duestate and Stripe automatically retries the charge over several days. We will email the Account owner so that you can update your payment method. If all retries fail, your subscription is cancelled and your Team is downgraded to the free plan at that point. The shorter retention window applies after a 30-day grace period — export any Submissions you wish to retain during the grace period.

10. Usage Limits & Fair Use

Each plan includes a monthly Submission limit, published on the pricing page. When you reach your limit:

• Your Forms will pause and stop accepting new Submissions until the next billing cycle. End Users will see a friendly message indicating the form is temporarily unavailable.
• There are no overage charges. You will never be billed beyond your plan's price.
• You can upgrade your plan at any time to increase your limits immediately.

In addition:

• API endpoints are subject to rate limiting to ensure fair usage and protect service stability.
• Automated or bot Submissions are not permitted unless sent through our authenticated API. Forms are protected by Cloudflare Turnstile to prevent abuse.
• The AI form-generation feature has its own monthly per-Team quota that resets at the start of each calendar month. Quotas vary by plan and are published on the pricing page. When you reach your AI quota, manual form creation continues to work and counts toward your standard Submission limit only.
• Webhook deliveries are best-effort and retried for a limited number of attempts on failure. Webhook delivery logs are retained for 30 days. You are responsible for ensuring your receiving endpoint is idempotent and verifies signatures.

11. Service Availability

We strive to maintain high availability and target an uptime of 99.5% or greater. The Service is provided without a guaranteed Service Level Agreement (SLA) at this time. We may introduce formal SLA commitments for higher-tier customers in the future.

You acknowledge that:

• The Service may experience occasional downtime for maintenance, updates, or unforeseen issues.
• We communicate planned maintenance in advance where possible via our status page at https://status.simplyforms.dev.
• We may modify, update, or discontinue features of the Service with reasonable notice. We will notify you of material changes that affect your use of the Service.

Backups. Our database provider performs managed daily scheduled backups with a 7-day rolling retention window for disaster-recovery purposes. Backups are not customer-accessible and are not used to restore individual accounts or Submissions.

12. Intellectual Property

The SimplyForms name, logo, branding, website design, source code, and all associated intellectual property are owned by Simplyxity Ltd. The SimplyForms name and logo are trademarks of Simplyxity Ltd.

You may not:

• Use the SimplyForms name, logo, or branding in a way that suggests endorsement or affiliation without our written permission.
• Copy, reproduce, or distribute any part of the Service's design or code.

You retain full ownership of your Content. Nothing in these Terms transfers ownership of your data to Simplyxity Ltd.

13. Privacy & Cookies

Our handling of personal data is described in the Privacy Policy, our use of cookies in the Cookie Policy, and our processor obligations in the Data Processing Agreement. All three are incorporated into these Terms by reference.

14. Third-Party Services

The Service relies on third-party sub-processors to operate. The full, current list is published at /legal/subprocessors. By using SimplyForms you acknowledge that these providers process limited data on our behalf under written contracts.

Customer-selected CAPTCHA providers.Forms include built-in spam protection via Cloudflare Turnstile. You may instead choose a third-party CAPTCHA provider — Google reCAPTCHA, hCaptcha, or Friendly Captcha— for a Form you embed on your own site. If you do, you are responsible for maintaining your own account with that provider, for the API keys you configure, and for complying with that provider's terms and any consent or disclosure obligations it places on you (including disclosing the provider's cookies on your own site). When you enable such a provider, SimplyForms transmits each verification request to it on your instruction as part of operating your Form; we do not provide, warrant, or control the third-party CAPTCHA service.

15. Limitation of Liability

The Service is provided on an "as is" and "as available" basis, without warranties of any kind, whether express or implied, including but not limited to implied warranties of merchantability, fitness for a particular purpose, and non-infringement.

Nothing in these Terms limits or excludes our liability for:

• death or personal injury caused by our negligence;
• fraud or fraudulent misrepresentation; or
• any other liability that cannot be excluded or limited under applicable law.

Subject to the above, to the maximum extent permitted by applicable law, Simplyxity Ltd and its officers, directors, employees, and agents shall not be liable for:

• Any indirect, incidental, special, consequential, or punitive damages.
• Any loss of data, profits, revenue, business opportunities, or goodwill.
• Any interruption or loss of service, including downtime or data loss.
• Any damages arising from your use of or inability to use the Service.

Subject to the above, our total aggregate liability shall not exceed the amount you have paid to Simplyxity Ltd for the Service in the 12 monthsimmediately preceding the event giving rise to the claim. If you are on a free plan, our maximum liability shall not exceed £100.

16. Indemnification

You agree to indemnify, defend, and hold harmless Simplyxity Ltd and its officers, directors, employees, agents, and affiliates from and against any claims, damages, losses, liabilities, costs, and expenses (including reasonable legal fees) arising out of or related to:

• Your use of the Service or any activity under your Account.
• The data you collect through your Forms, including any claims from End Users.
• Your violation of these Terms or any applicable law or regulation.
• Your infringement of any third party's rights, including intellectual property rights.

17. Suspension, Termination & Deletion

Termination by you

You may cancel a paid subscription or initiate Account deletion at any time through the dashboard, subject to first cancelling any active paid subscriptions and transferring ownership of — or removing other members from — any co-owned Teams. The dashboard will guide you through these steps and surface the relevant action when deletion is blocked.

On cancellation of a paid plan, your subscription remains active until the end of the current billing period.

Suspension or termination by us

We may suspend or terminate your access to the Service, with or without notice, if we reasonably believe that:

• You have violated these Terms or our Acceptable Use Policy.
• Your use of the Service poses a security risk or could harm other users.
• We are required to do so by law or a valid legal process.

Effect of termination

When your Account is deleted — whether by you or by us — your Forms, Submissions, Workspaces, uploaded files, and settings are permanently deleted immediately and cannot be recovered. Please export any data you wish to retain before initiating deletion. Disaster-recovery backups are not used for account reinstatement. Minimal audit-log rows (action, actor email, timestamp) are retained for security and legal compliance for up to 24 months. Billing and tax records are retained for the period required by UK tax law.

The following sections survive termination: 7 (Customer Content & Ownership), 15 (Limitation of Liability), 16 (Indemnification), 18 (Governing Law & Disputes), and any other provisions that by their nature should survive.

18. Governing Law & Disputes

If a dispute arises between you and Simplyxity Ltd, please contact us first at support@simplyforms.dev so we can try to resolve it informally through good-faith negotiation.

These Terms are governed by and construed in accordance with the laws of England and Wales, without regard to conflict-of-law principles. The courts of England and Wales shall have exclusive jurisdiction over any dispute arising out of or in connection with these Terms.

19. Changes to Terms

We may update these Terms from time to time. When we make material changes we will:

• Provide at least 30 days' notice before the changes take effect.
• Notify you by email and/or in-app notification.
• Update the "Last updated" date at the top of this page.

Your continued use of the Service after the changes take effect constitutes acceptance of the updated Terms. If you do not agree, you must stop using the Service and cancel your Account before the new Terms become effective.

20. Contact Information

• Email: support@simplyforms.dev
• Company: Simplyxity Ltd
• Company number: 16938823 (registered in England and Wales)
• Registered office: Office 16349, 182-184 High Street North, East Ham, London, England, E6 2JA