Privacy Policy

Last updated: 19.09.2026

This Privacy Policy describes how the FormCourier website, located at https://formcourier.site/, collects, uses, stores, and protects the personal data of visitors, customers, and users of the FormCourier product.

This Policy has been prepared with due regard to the Law of Ukraine “On Personal Data Protection.” If processing involves users from the European Economic Area, the requirements of the EU General Data Protection Regulation – GDPR – may also apply. (Legislation of Ukraine)

1. Who is responsible for data processing

The owner and controller of personal data is:

Name: Denys Skrypnychenko
Country: Ukraine
Email for privacy inquiries: support@formcourier.site
Website: https://formcourier.site/

For questions related to the processing or deletion of personal data, you can contact us at the email address provided above.

2. What data we may collect

Depending on how you use the website, we may process the following categories of data.

2.1. Data you provide directly

When completing a contact form, submitting a support request, or contacting us by email, you may provide:

  • name;
  • email address;
  • phone number;
  • company name;
  • website address;
  • information about WordPress, forms, and CRM;
  • message content;
  • information required to diagnose an issue;
  • attached files and screenshots.

Please do not submit API keys, passwords, access tokens, webhook URLs, bank card details, or other sensitive information through support forms.

2.2. Purchase data

If you purchase FormCourier through Codester or another marketplace, we may receive limited information required to verify your purchase and provide support, such as:

  • the buyer’s name or username;
  • email address;
  • order ID;
  • name of the purchased product;
  • purchase date;
  • license type;
  • support access period.

Payments are processed by the marketplace itself or its payment partners. We do not receive or store your full bank card number, CVV code, or payment account details.

Data processing by the marketplace is governed by its own privacy policy.

2.3. Technical data

When you visit the website, the server and services we use may automatically receive:

  • IP address;
  • browser type and version;
  • device type;
  • operating system;
  • browser language;
  • date and time of the visit;
  • pages viewed;
  • referring page address;
  • technical request and error logs;
  • cookies and similar identifiers.

This data is used to maintain security and website stability, diagnose errors, and analyze website usage.

2.4. Data provided to support

For diagnostic purposes, a user may voluntarily submit:

  • a FormCourier diagnostic JSON report;
  • log excerpts;
  • screenshots of settings;
  • information about the WordPress, PHP, and plugin versions;
  • the name of the form and CRM being used;
  • a description of the error.

The FormCourier diagnostic report is designed to exclude API keys, webhook URLs, credentials, and the contents of submitted form entries. Nevertheless, before sending the file, we recommend that you verify that it does not contain confidential information.

3. How we use data

Personal data may be used for the following purposes:

  • responding to inquiries submitted through forms and email;
  • providing technical support;
  • verifying purchases and licenses;
  • providing access to updates;
  • diagnosing plugin errors;
  • improving the website and product;
  • maintaining website security;
  • preventing abuse, spam, and fraud;
  • sending service notifications;
  • sending news and marketing communications where consent has been provided;
  • complying with legal requirements;
  • protecting our rights and legitimate interests.

We do not use the data provided for automated decision-making that produces legal or similarly significant effects for the user.

4. Legal bases for processing

Depending on the circumstances, processing may be based on:

  • performance of a contract or taking steps before entering into a contract;
  • the user’s consent;
  • compliance with legal requirements;
  • legitimate interests in maintaining security, supporting users, and developing the product;
  • the need to establish, exercise, or defend legal claims.

You may withdraw your consent to data processing where processing is based on consent. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

5. How FormCourier processes submissions on users’ websites

5.1. How FormCourier CRM processes data

FormCourier is installed on the customer’s WordPress website and is used to transfer data from connected forms to the CRM selected by the website owner.

In the standard configuration:

  • form submissions are processed on the user’s WordPress website;
  • data is transferred directly to the CRM configured by the user;
  • settings and logs are stored in the database of the user’s WordPress website;
  • the FormCourier developer does not automatically receive the contents of form submissions;
  • the developer does not have access to the user’s CRM account;
  • the developer does not receive API keys unless the user provides them directly as part of a support request.

The owner of the website where FormCourier is installed independently determines:

  • what data is collected through forms;
  • the purposes for which it is used;
  • which CRM it is transferred to;
  • how long it is stored;
  • who is granted access;
  • which legal basis applies.

The owner of such a website is responsible for preparing their own privacy policy and informing visitors about the use of forms, CRM systems, UTM parameters, cookies, and other tools.

5.2. How FormCourier Notifications Pro processes data

FormCourier Notifications Pro is installed on the user’s WordPress website and is designed to send notifications about submissions from supported WordPress forms to communication channels selected by the website owner.

Depending on the plugin settings, submission data may be sent to:

  • Telegram via the Telegram Bot API;
  • Slack via Slack Incoming Webhooks;
  • WhatsApp via Meta’s official WhatsApp Business Platform / WhatsApp Cloud API.

The information transmitted may include a name, email address, phone number, message content, and other form fields selected by the website owner.

In the standard configuration, FormCourier Notifications Pro:

  • processes submissions directly on the user’s WordPress website;
  • transfers data only to the channels and destinations configured by the website owner;
  • may store local delivery logs on the WordPress website for troubleshooting delivery issues;
  • may receive technical message delivery statuses from the WhatsApp Business Platform, such as Accepted, Sent, Delivered, Read, or Failed;
  • stores connection settings and integration credentials on the user’s WordPress website;
  • the FormCourier Notifications Pro developer does not automatically receive the contents of submissions, Telegram tokens, Slack Webhook URLs, WhatsApp Access Tokens, Meta App Secrets, or other user credentials.

The WordPress website owner independently determines what data is collected through forms, which channels it is sent to, which recipients have access to it, how long the data is retained, and the legal bases for its processing.

When Telegram, Slack, or WhatsApp is used, the data is also processed by the respective third-party providers in accordance with their own terms and privacy policies.

5.3. How FormCourier Keyword Research processes Google Ads data

FormCourier Keyword Research is a keyword research and marketing analysis tool operated by FormCourier.

The application may connect to a Google Ads account through the Google Ads API after the user explicitly authorizes access through Google OAuth.

When access is authorized, FormCourier Keyword Research may retrieve Google Ads data required for keyword research and planning, including:

  • keyword ideas;
  • historical search metrics;
  • average monthly search volumes;
  • keyword competition information;
  • advertising bid estimates;
  • geographic and language targeting information;
  • other keyword planning metrics made available through the Google Ads API.

FormCourier Keyword Research uses this information only for keyword research, SEO analysis, product research, advertising research, and marketing planning.

The application does not use Google Ads data for unrelated advertising profiling, does not sell Google user data, and does not provide Google Ads data to third parties for their own marketing purposes.

Access to Google Ads data is granted only after the Google account owner explicitly authorizes the application through Google OAuth.

OAuth credentials, including access tokens and refresh tokens, are used only to authenticate requests to Google APIs. They are not sold or disclosed to third parties.

FormCourier Keyword Research requests access only to the Google services and permissions necessary for its stated functionality.

Users may revoke the application’s access to their Google Account at any time through their Google Account security settings.

FormCourier Keyword Research’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6. Cookies and similar technologies

The website may use cookies and similar technologies for:

  • ensuring that pages function properly;
  • saving user preferences;
  • protecting forms from spam;
  • analyzing website traffic;
  • measuring marketing effectiveness;
  • recording user consent.

Cookies may be:

  • necessary – required for website functionality and security;
  • functional – remember selected preferences;
  • analytics – help us understand how the website is used;
  • marketing – used to measure the effectiveness of advertising campaigns.

Non-essential cookies should only be set in accordance with the consent preferences selected by the user.

You can delete or block cookies in your browser settings. If necessary cookies are disabled, some website features may not function properly.

7. Analytics and third-party services

The website may use third-party services, such as:

  • web analytics;
  • spam protection;
  • cookie consent services;
  • hosting;
  • CDN;
  • email services;
  • support systems;
  • marketplaces;
  • payment services;
  • backup and security services.
  • Google OAuth for user authorization;
  • Google Ads API for keyword research and advertising planning data;

These providers may process technical or personal data to the extent necessary to provide their services.

8. Sharing data with third parties

We do not sell or disclose personal data to third parties for their own marketing purposes.

Access to data may be provided to:

  • hosting providers;
  • email service providers;
  • technical support systems;
  • analytics and security services;
  • marketplaces through which purchases are made;
  • professional advisers;
  • government authorities where disclosure is required by law;
  • a new owner of the project in the event of a sale or business reorganization.

Service providers receive only the data necessary to perform a specific task.

When FormCourier Notifications Pro is used, form submission data may be transmitted to Telegram, Slack, and Meta (WhatsApp Business Platform) only when the WordPress website owner has configured the respective communication channel. The categories and amount of data transmitted depend on the website owner’s form, message template, and routing configuration.

When FormCourier Keyword Research is used, Google account and Google Ads data are accessed only after the Google account owner explicitly authorizes the application through Google OAuth.

Google Ads data obtained through the Google Ads API is used only to provide the keyword research and marketing analysis functionality requested by the authorized user.

FormCourier does not sell Google user data or share Google Ads data with third parties for their own advertising, marketing, profiling, or unrelated purposes.

9. International data transfers

Some service providers and marketplaces may be located outside Ukraine or the European Economic Area.

In such cases, data may be transferred to countries with different personal data protection rules. Where necessary, appropriate contractual, organizational, and technical safeguards are applied.

10. Data retention

We retain data no longer than necessary for the purposes for which it was collected.

Approximate retention periods:

  • website inquiries – up to 3 years after the communication has ended;
  • technical support messages – up to 3 years;
  • purchase and license information – for the duration of the license and for any additional period required for accounting or legal record-keeping;
  • server logs – according to the hosting configuration;
  • analytics data – according to the analytics service settings;
  • consent records – for as long as necessary to demonstrate that consent was obtained;
  • marketing subscriptions – until consent is withdrawn or the user unsubscribes;
  • Google OAuth credentials and Google Ads API data – retained only for as long as necessary to provide the authorized keyword research functionality, maintain authentication, or meet applicable legal and security requirements. Access may be revoked by the user at any time.

Data may be retained for longer if required by law or if necessary to resolve a dispute or protect legal rights.

11. Personal data security

We implement reasonable technical and organizational security measures, including:

  • using HTTPS;
  • restricting access to the website’s administrative area;
  • keeping WordPress, themes, and plugins up to date;
  • maintaining backups;
  • protecting forms from spam;
  • controlling access to email and hosting accounts;
  • minimizing the amount of data collected;
  • restricting access to user inquiries;
  • using strong passwords and, where available, two-factor authentication.

No method of data transmission or storage can guarantee absolute security. If an incident is identified, we will take reasonable measures to limit its consequences.

12. User rights

Depending on the applicable law, a user may have the right to:

  • find out whether their personal data is being processed;
  • obtain information about the processing;
  • request a copy of their data;
  • correct inaccurate or incomplete data;
  • request deletion of their data;
  • restrict processing;
  • object to processing;
  • receive their data in a machine-readable format;
  • withdraw consent;
  • lodge a complaint with the competent data protection authority.

The GDPR expressly provides for the rights to be informed, access, rectification, erasure, restriction of processing, data portability, and objection. (European Commission)

To exercise your rights, send a request to support@formcourier.site.

Please include the following information in your request:

  • name;
  • the email address used when contacting us or making a purchase;
  • the nature of your request;
  • information that will allow us to locate the relevant data.

We may request additional proof of identity if necessary to prevent unauthorized access to data.

13. Marketing communications

We may send news, offers, and information about updates only where there is an appropriate legal basis, such as the user’s consent.

Every marketing email must provide an option to unsubscribe from future communications.

Service communications related to purchases, security, licenses, support, or important product changes may be sent regardless of marketing subscription status.

14. Links to third-party websites

The website may contain links to:

  • Codester;
  • CRM system documentation;
  • websites of WordPress plugin developers;
  • social networks;
  • other external resources.

We do not control how data is processed on third-party websites. Before providing any data, we recommend reviewing their privacy policies.

15. Children’s data

The website and FormCourier are intended for website owners, developers, agencies, and business representatives.

We do not knowingly collect personal data from children. If you believe that a child has provided us with personal data without appropriate consent, please contact us at support@formcourier.site.

16. Changes to this Privacy Policy

We may periodically update this Privacy Policy, for example, due to:

  • changes to website functionality;
  • the introduction of new services;
  • changes to how the product is sold;
  • changes in applicable laws;
  • changes to data processing practices.

The current version is published on this page. The date of the latest update is shown at the top of the document.

17. Contact information

For questions regarding the processing and protection of personal data, please contact:

FormCourier
Name: Denys Skrypnychenko
Country: Ukraine
Email for privacy inquiries: support@formcourier.site
Website: https://formcourier.site/