Legal

Terms of Service, Privacy Policy, Acceptable Use, and related notices for Flareform. By using the website, account, billing, documentation, or hosted form ingest API, you agree to these terms. Last updated: August 7, 2026.

1. Terms of Service

1.1 Operator and product

Flareform (“Flareform,” “we,” “us,” or “our”) operates this Service. References to “Service” mean the Flareform website, app (Overview, Inbox, Analytics, Projects), documentation, account system, Stripe billing integration, and hosted form ingest endpoints. “You” means the individual or entity accessing or using the Service. Self-hosted deployments you run remain subject to the MIT license for the software and these terms for any Flareform-hosted components you connect to.

1.2 Agreement

Accessing or using the Service constitutes acceptance of this Legal page. If you do not agree, do not use the Service. If you use the Service on behalf of an organization, you represent that you have authority to bind that organization, and “you” includes that organization.

1.3 Eligibility

You must be at least 18 years old (or the age of majority where you live) and legally able to enter contracts. Accounts require a valid email address. You are responsible for keeping credentials confidential and for all activity under your account and projects.

1.4 License to use

Subject to these terms, Flareform grants you a limited, non-exclusive, non-transferable, revocable license to use the hosted Service for your lawful internal or commercial purposes. The open-source Flareform codebase is also available under the MIT License. We retain all right, title, and interest in Flareform branding, documentation, and hosted infrastructure. No rights are granted except as expressly stated.

1.5 Your content

You are solely responsible for form submissions, project settings, and other data you send to ingest URLs or store in your account, including that you have all rights and permissions needed, and that processing complies with applicable law. Flareform does not claim ownership of your submission payloads. You grant Flareform only the limited rights needed to operate hosted features you choose to use (account metadata, stored submissions, spam scoring requests, and billing records).

1.6 Changes and availability

We may modify, suspend, or discontinue any part of the Service at any time, with or without notice. We may update these terms by posting a revised Legal page. Continued use after changes constitutes acceptance. We do not guarantee uninterrupted or error-free operation.

1.7 Termination

You may stop using the Service at any time. We may suspend or terminate access or accounts if we believe you violated these terms, created risk, failed to pay, or as needed to protect the Service or others. Sections that by nature should survive (including disclaimers, liability limits, indemnity, and governing law) survive termination.

2. Privacy Policy

2.1 Account and projects

Hosted Flareform stores account data, project configuration, and submission records you send to your ingest URLs on Cloudflare (Workers, KV, D1). Self-hosted deployments keep data in your own Cloudflare account unless you also use Flareform-hosted spam scoring.

2.2 Account and authentication

If you create an account, we process email address, password hashes or magic-link/session tokens, email verification status, plan and usage metadata, and related security logs. Passwords are stored hashed, not as plaintext. Session tokens authenticate the web app; do not share them.

2.3 Ingest API

When a client posts to your project ingest URL, we receive and may process the request payload, origin headers, timestamps, spam scores, and IP hashes used for abuse prevention. Do not collect secrets, payment card numbers, or regulated health data unless you have a lawful basis and accept the risk. You are the controller of data submitted to your projects; Flareform processes it to provide the Service and enforce limits.

2.4 Spam scoring

Ingest may call an edge spam and dedupe service for classification and duplicate collapse. Payload fields may be sent to that service when the integration is enabled.

2.5 Billing

Paid plans are processed by Stripe. We receive subscription status, customer identifiers, and related billing metadata. Payment card details are handled by Stripe under Stripe’s terms and privacy policy. We do not store full card numbers on Flareform servers.

2.6 Email

We may send transactional email (verification, sign-in codes, password reset, support routing, billing notices) through Brevo or another email provider. Delivery is not guaranteed. Marketing email, if any, will follow applicable consent rules.

2.7 Logs, security, and abuse

We may retain IP hashes, user-agent strings, request paths, error rates, and similar telemetry to operate, secure, rate-limit, and debug the Service. We may block or throttle traffic that appears abusive.

2.8 Cookies and similar tech

The site may use local storage or similar browser storage for sessions and preferences. We do not sell personal information. Third-party CDNs or fonts loaded by the site may receive standard technical requests from your browser.

2.9 Retention and deletion

We retain account, billing, and submission records as needed to provide the Service, meet legal obligations, resolve disputes, and enforce agreements. You may request account closure via the contact channel below; we will delete or anonymize personal account data where reasonably practicable, subject to legal retention needs and backups.

2.10 Children

The Service is not directed to children under 13 (or under 16 where that is the applicable age). We do not knowingly collect personal information from children.

3. Acceptable Use

You will not, and will not allow others to:

• Violate law, including spam, fraud, harassment, IP infringement, or privacy laws
• Use ingest URLs to collect data unlawfully or to evade anti-spam systems without lawful authority
• Probe, scan, or attack infrastructure; bypass rate limits, auth, or billing; or reverse engineer except as allowed by law
• Share session tokens publicly or use another user’s credentials
• Upload malware, or process data you are not allowed to process
• Misrepresent affiliation with Flareform
• Use the Service in a way that risks harm to minors, critical infrastructure, or public safety

We may investigate and take action, including suspension, without prior notice when we reasonably believe a violation occurred.

4. Projects, forms, and logs

Each project exposes a form ingest endpoint and, when enabled, an error log endpoint. You are responsible for all traffic to your project URLs, including spam volume, log volume, and quota consumption. Configure allowed origins and Turnstile when appropriate. Spam scores, dedupe, and analytics are tools to assist you; you remain responsible for how you act on them in production systems. Logging can be enabled or disabled per project. Worryful log events (error, fatal, critical, warn) count toward your submission quota; duplicate events are collapsed when possible.

5. Plans, trials, and billing

Plan names, limits, and prices are described on Pricing and may change. Taxes may apply. Subscriptions renew until canceled through the Stripe customer portal or other method we provide. Fees already charged are generally non-refundable except where required by law or expressly stated by us. Failure to pay may result in downgrade or suspension. Plan quotas are enforcement tools, not a warranty of capacity. Self-hosting the open-source software does not include Flareform-hosted entitlements.

6. Disclaimers

THE SERVICE IS PROVIDED “AS IS” AND “AS AVAILABLE.” To the maximum extent permitted by law, Flareform disclaims all warranties, express or implied, including merchantability, fitness for a particular purpose, title, and non-infringement. We do not warrant that spam scores, analytics, inbox delivery, or ingest availability will be complete, accurate, or suitable for any particular use case. You are solely responsible for verifying outputs before deleting data, blocking users, or taking automated action.

7. Limitation of liability; indemnity

7.1 Limitation

To the maximum extent permitted by law, Flareform and its owners, affiliates, contractors, and suppliers will not be liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, or for lost profits, revenue, data, goodwill, or business interruption, arising from or related to the Service or these terms, whether in contract, tort, or otherwise, even if advised of the possibility. Our aggregate liability for all claims relating to the Service will not exceed the greater of (a) the amounts you paid to Flareform for the Service in the three (3) months before the claim arose, or (b) fifty U.S. dollars (US $50). Some jurisdictions do not allow certain limitations; in those cases our liability is limited to the fullest extent permitted.

7.2 Indemnity

You will defend, indemnify, and hold harmless Flareform and its personnel from and against claims, damages, losses, and expenses (including reasonable attorneys’ fees) arising out of your content, your use of the Service, your ingest traffic, your violation of these terms or law, or your infringement of third-party rights.

7.3 Essential basis

The disclaimers and limits in this Legal page are a fundamental part of the bargain and apply even if any remedy fails of its essential purpose.

8. Intellectual property; feedback

Flareform, logos, and related marks are trademarks or trade dress of their respective owners. You may not use them without prior written permission except for factual references. Feedback you provide may be used by Flareform without obligation to you.

9. Third-party services

The Service may link to or integrate third parties (including Stripe, Brevo, Cloudflare, CDNs, spam scoring providers, and GitHub). Their terms and privacy policies govern their services. Flareform is not responsible for third-party outages, policies, or acts.

10. Export and sanctions

You may not use the Service if you are prohibited under applicable export control or sanctions laws, or for prohibited end uses.

11. Governing law; disputes

These terms are governed by the laws of the State of Delaware, USA, without regard to conflict-of-law rules, unless mandatory local consumer law requires otherwise. Exclusive venue for disputes that are not resolved informally is the state or federal courts located in Delaware, except that Flareform may seek injunctive relief in any jurisdiction. You waive jury trial to the extent permitted by law. If a provision is unenforceable, the remainder stays in effect. Failure to enforce a provision is not a waiver. These terms are the entire agreement regarding the Service and supersede prior conflicting terms for the same subject.

12. Contact

Questions about this Legal page: use Get Support in the app, visit flareform.pages.dev, or open an issue in the Flareform repository. For privacy requests, include enough detail for us to verify and respond.

This page is provided for transparency and risk allocation. It is not personalized legal advice. If your use case requires a signed MSA, DPA, or other contract, contact Flareform before relying on the Service for regulated workloads.