Privacy Policy

Last Updated: April 21, 2026

1. Introduction

INKYY ("we," "our," or "us") operates Upform.com (the "Service"), a form builder, survey, and data collection platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using Upform, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.

Contact Information:

Company: INKYY
Email: hello@inkyy.com
Address: Kozarska ulica 12, Laktaši, 78250, Bosnia and Herzegovina

2. Information We Collect

2.1 Personal Information You Provide

When you register for and use our Service, we collect:

Account Information: Email address, name, password (encrypted)
Profile Information: Any additional information you choose to provide
Form & Survey Data: Content you create, responses you collect, and data you upload
Communication Data: Messages you send to our support team

2.2 Information from Third-Party Sign-In

When you sign in using Google OAuth:

Basic profile information (name, email address, profile picture)
We do not access your Google account beyond authentication

2.3 Automatically Collected Information

We automatically collect:

Usage Data: Pages visited, features used, time spent, click patterns
Device Information: IP address, browser type, operating system, device identifiers
Cookies and Tracking: See our Cookie Policy below

2.4 Payment Information

Payment information (credit card details) is processed directly by our payment processors (Dodo Payments or Paddle). We do not store or have access to your full payment card details. We only receive confirmation of successful transactions and billing information necessary for account management.

3. How We Use Your Information

We use collected information for:

3.1 Service Delivery

Creating and managing your account
Providing access to form building and survey features
Storing and processing your forms and collected responses
Authenticating your identity

3.2 Service Improvement

Understanding how users interact with our Service
Analyzing usage patterns through Google Analytics
Improving features and user experience
Developing new functionalities

3.3 Communication

Sending service-related notifications and updates
Responding to your inquiries and support requests
Sending marketing communications (with your consent - you can opt out anytime)

3.4 Legal and Security

Complying with legal obligations
Preventing fraud and abuse
Enforcing our Terms of Service
Protecting our rights and the safety of our users

4. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your data based on:

Contract Performance: Processing necessary to provide our Service to you
Legitimate Interests: Improving our Service, preventing fraud, ensuring security
Consent: Marketing communications, optional features (you can withdraw consent anytime)
Legal Obligation: Compliance with applicable laws

5. How We Share Your Information

We do not sell your personal information. We may share your data with:

5.1 Service Providers

Payment Processors: Dodo Payments or Paddle (for payment processing)
Analytics Providers: Google Analytics (for usage analysis)
Hosting Providers: Cloud infrastructure providers for data storage
Email Service Providers: For transactional and marketing emails

5.2 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to:

Protect our legal rights
Prevent fraud or illegal activity
Protect the safety of our users or the public

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5.4 With Your Consent

We may share information with third parties when you explicitly consent.

6. Data Retention

We retain your information for as long as:

Your account is active
Necessary to provide our Service
Required by law or for legitimate business purposes

When you delete your account:

Personal information is deleted within 30 days
Anonymized analytics data may be retained
Backup copies may persist for up to 90 days

You can request immediate deletion by contacting hello@inkyy.com.

7. Your Rights (GDPR)

Under GDPR, you have the right to:

7.1 Access

Request a copy of the personal data we hold about you

7.2 Rectification

Correct inaccurate or incomplete data

7.3 Erasure ("Right to be Forgotten")

Request deletion of your personal data

7.4 Restriction

Request limitation of processing your data

7.5 Data Portability

Receive your data in a structured, machine-readable format

7.6 Object

Object to processing based on legitimate interests or direct marketing

7.7 Withdraw Consent

Withdraw consent for data processing at any time (where consent is the legal basis)

7.8 Lodge a Complaint

File a complaint with your local data protection authority

To exercise these rights, contact us at hello@inkyy.com

8. Data Security

We implement appropriate technical and organizational measures to protect your data:

Encryption in transit (HTTPS/TLS)
Encryption at rest for sensitive data
Regular security assessments
Access controls and authentication
Secure password hashing

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

9. International Data Transfers

Your data may be transferred to and processed in countries outside Bosnia and Herzegovina. When we transfer data internationally, we ensure appropriate safeguards are in place, such as:

Standard Contractual Clauses approved by the European Commission
Adequacy decisions by the European Commission
Other lawful transfer mechanisms under GDPR

10. Children's Privacy

Our Service is not intended for users under 16 years of age. We do not knowingly collect personal information from children under 16.

If you are a parent or guardian and believe your child has provided us with personal data, please contact us at hello@inkyy.com, and we will delete such information.

11. Cookies and Tracking Technologies

We use cookies and similar tracking technologies. See our Cookie Policy (Section 13) for details.

You can control cookies through your browser settings. Note that disabling cookies may limit your ability to use certain features of our Service.

12. Third-Party Links

Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

13. Cookie Policy

What Are Cookies?

Cookies are small text files stored on your device when you visit our website.

Cookies We Use

#### 13.1 Essential Cookies

Purpose: Authentication, security, basic functionality
Duration: Session or up to 1 year
Legal Basis: Necessary for Service operation
Cannot be disabled

#### 13.2 Analytics Cookies

Provider: Google Analytics
Purpose: Understand usage patterns, improve Service
Data Collected: Pages visited, time spent, user interactions, anonymized IP
Duration: Up to 2 years
Legal Basis: Legitimate interest (you can opt out)
Opt-out: Google Analytics Opt-out Browser Add-on

#### 13.3 Functional Cookies

Purpose: Remember your preferences, settings
Duration: Up to 1 year
Can be disabled through browser settings

Managing Cookies

You can control cookies through:

Browser Settings: Most browsers allow you to refuse cookies
Google Analytics Opt-out: Use the browser add-on linked above
Contact Us: Email hello@inkyy.com for assistance

Note: Disabling cookies may affect Service functionality.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

Posting the new Privacy Policy on this page
Updating the "Last Updated" date
Sending an email notification (for material changes)

Your continued use of the Service after changes constitutes acceptance of the updated policy.

15. Contact Us

For questions, concerns, or to exercise your rights under this Privacy Policy:

Email: hello@inkyy.com Address: INKYY, Kozarska ulica 12, Laktaši, 78250, Bosnia and Herzegovina

We will respond to your request within 30 days as required by GDPR.

Your privacy matters to us. Thank you for trusting Upform with your data.