Terms of Service

1. Agreement

By accessing or using formheron.com, the FormHeron dashboard, public form endpoints, APIs, documentation, or related services (together, the "Service"), you agree to these Terms of Service ("Terms"). If you do not agree, do not use the Service.

These Terms incorporate by reference our Privacy Policy, Cookie Policy, Data Processing Addendum (DPA), and Sub-processor list. If you use the Service on behalf of an organisation, you represent that you have authority to bind that organisation.

2. The Service

FormHeron is a form backend and lead inbox for developers and agencies. It receives HTML or JSON form submissions, applies spam and abuse controls, stores leads for your plan's retention period, and can deliver notifications, HMAC-signed webhooks, and optional Slack messages. It is not a visual form builder, file-upload host, autoresponder, or spreadsheet product.

The Service is offered on a freemium model: a Free plan and paid subscription plans (currently Indie and Pro) as described on the pricing page. Plan limits (submissions per month, projects, forms, retention, webhooks, and features) exist to keep the Service fair and available. We may enforce quotas, rate limits, and fair-use controls. Published plan numbers may change; the limits shown in your dashboard and on the pricing page at the time of use control for that billing period.

3. Eligibility

You must be at least 16 years old (or the age of digital consent in your jurisdiction, if higher) to create an account or use the Service. By using FormHeron, you confirm that you meet this age requirement. If you process personal data of others through the Service, you are responsible for having a lawful basis and any required notices or consents.

4. Accounts

Access to the dashboard requires an account. We use passwordless magic-link sign-in: a one-time link is emailed to you and expires after a short period. You must provide a valid email address you control and keep it accurate enough for security notices.

You are responsible for activity under your account, for protecting access to your email inbox (and any devices that receive magic links), and for notifying us promptly at [email protected] if you suspect unauthorised access. We may revoke sessions, require re-authentication, or suspend accounts when we reasonably believe security is at risk.

Public form keys grant submit-only capability to your form endpoint. They are not dashboard credentials. Origin allowlists reduce abuse; they are not a substitute for authentication of form submitters and do not make a form private.

5. Acceptable Use

You must not use the Service to submit, store, or transmit:

• Content that is illegal under applicable law
• Child sexual abuse material (CSAM) or any content that exploits or harms minors
• Content that infringes intellectual property, privacy, publicity, or other third-party rights
• Content that promotes unlawful violence, targeted harassment, or unlawful discrimination
• Special-category or highly sensitive personal data through forms or the API, including health data, biometric identifiers, government ID numbers intended as primary identifiers, full financial account or payment card numbers, or similar high-risk data. Open web forms and our retention model are not designed for this data. Violations may result in immediate suspension or termination

You must not:

• Scrape, crawl, or automate access beyond normal product use in a way that degrades the Service or circumvents limits
• Attempt to bypass quotas, rate limits, spam filters, origin allowlists, Turnstile, or other security measures
• Probe, reverse engineer, or attack the Service except through authorised security research coordinated with us
• Use form keys, webhooks, or exports to access another customer's data
• Resell, white-label, or multi-tenant the Service in ways not permitted by your plan without our written agreement
• Use the Service for high-risk automated decisions that produce legal or similarly significant effects on individuals without appropriate human oversight and legal basis

We may investigate suspected violations, rate-limit or block traffic, suspend or terminate accounts, delete prohibited data, and pursue legal remedies.

6. Your Content and Roles

Account configuration (projects, forms, webhooks, tags, notes you write, and similar settings) remains yours. You grant FormHeron a limited, non-exclusive, worldwide licence to host, process, and display that configuration solely to operate the Service for you.

Form submissions (payloads sent by end users to your forms) are personal data you (or your client) control. For GDPR and similar regimes, you are typically the controller and FormHeron is the processor. Processing is described in the DPA and Privacy Policy. We store submissions for your plan's retention period, then purge them. We do not use submission content to train AI models (FormHeron does not offer generative AI features).

You warrant that you have the rights and legal basis needed to collect and process submissions through FormHeron, that your forms and privacy notices are accurate, and that use of the Service will not violate third-party rights or law. You are responsible for what fields you collect and how you use exported or webhook-delivered data outside FormHeron.

7. Plans, Payment, and Refunds

Paid plans are sold and billed by Dodo Payments as Merchant of Record. When you upgrade, you enter a payment relationship with Dodo under Dodo's terms and privacy practices. FormHeron receives payout as Dodo's supplier. Prices are shown in USD on the pricing page unless stated otherwise.

Subscriptions renew according to the plan and checkout you select (for example monthly) until cancelled through the billing portal or process Dodo provides. Failure to pay may result in downgrade to Free limits or suspension of paid features after any grace period we or Dodo apply.

Refundsare handled through Dodo's refund process and policies. Contact [email protected] and we will help route the request; we do not independently process card refunds outside the MoR. Chargebacks may lead to account review or termination.

Changing plans may take effect as described in the dashboard and Dodo checkout (immediate upgrade, period-end downgrade, or similar). Unused submission quota does not roll over unless we expressly say so.

8. Third-Party Services

The Service depends on infrastructure and optional integrations, including hosting, email delivery, DNS/WAF, optional Cloudflare Turnstile (with your keys), Slack webhooks you configure, and Dodo for billing. Their terms and policies also apply to the parts of the flow they operate. A current list of sub-processors is at /legal/sub-processors.

We are not responsible for third-party outages, policy changes, or how you configure destinations (webhook URLs, Slack hooks, Turnstile keys). You must keep secrets confidential and use HTTPS endpoints you control.

9. Availability (No SLA)

FormHeron is provided on a best-effort basis. Unless we have a separate written enterprise agreement stating otherwise, we do not offer a formal uptime SLA, service credits, or guaranteed response times. We may rate-limit, maintain, change, or discontinue features with or without prior notice, though we aim to avoid unnecessary disruption.

We are not liable for unavailability, delayed deliveries (email, webhooks, Slack), or data loss beyond the recovery capabilities of our ordinary backups and retention design. Export important leads on a schedule that matches your risk tolerance.

10. Intellectual Property

FormHeron and its operator own the Service name, logos, website design, software, documentation, templates we publish, and other materials we create, excluding Your Content and end-user submissions. These Terms do not grant you a licence to copy, modify, reverse engineer (except where mandatory law allows), or redistribute our intellectual property except as needed to use the Service as intended (for example, embedding form endpoints and snippets we provide).

11. Termination

You may stop using the Service at any time. You may export project data where the product allows (for example Dashboard → Data settings) and cancel paid subscriptions through the billing portal. We may suspend or terminate access for Terms violations, non-payment, legal risk, or abuse, with or without prior notice when urgency requires it.

On termination or plan expiry, access to paid features may end and data may be retained only for the applicable retention period or legal hold, then deleted per our Privacy Policy and purge jobs. Sections that by nature should survive (including acceptable use remnants, IP, disclaimers, liability limits, indemnity, and governing law) survive termination.

12. Disclaimer of Warranties

The Service is provided on an "as is" and "as available" basis, without warranty of any kind, express or implied, including but not limited to the warranties of merchantability, fitness for a particular purpose, title, and non-infringement. FormHeron does not warrant that the Service will be uninterrupted, error-free, secure, or free of harmful components, or that spam filtering, origin allowlists, or optional captcha will block all abuse.

13. Limitation of Liability

To the maximum extent permitted by law, FormHeron and its operator will not be liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, or any loss of profits, revenue, data, goodwill, or business opportunity, arising out of or related to the Service or these Terms, whether based in contract, tort, or any other theory, even if advised of the possibility of such damages.

Our total aggregate liability for all claims arising out of or related to the Service or these Terms will not exceed the greater of (a) the amounts you paid to use FormHeron (via Dodo or otherwise) in the twelve (12) months before the claim, or (b) USD $100 if you are on the Free plan or have paid nothing in that period.

Some jurisdictions do not allow the exclusion or limitation of certain warranties or liabilities. In those jurisdictions, our liability is limited to the maximum extent permitted by law, and the above limitations may not apply to you in full.

14. Indemnity

You will indemnify and hold harmless FormHeron and its operator from and against claims, damages, liabilities, and expenses (including reasonable legal fees) arising out of or related to: (a) form submissions and other content collected or processed through your account; (b) your use of exports, webhooks, or third-party destinations; (c) your violation of these Terms; or (d) your violation of third-party rights or applicable law.

15. Governing Law and Venue

These Terms are governed by the laws of India, without regard to conflict-of-law principles. Subject to mandatory consumer protections that cannot be waived in your place of residence, disputes will be brought exclusively in the courts of competent jurisdiction in India.

Where a party is unable to bring or defend a claim in India solely due to jurisdictional limitations that cannot be cured, the parties consent to an alternate forum of competent jurisdiction where the claim can be heard, without waiving any other rights under these Terms.

16. Changes

We may update these Terms from time to time. Material changes will be posted on this page with a new "Last updated" date. Your continued use of the Service after changes are posted constitutes acceptance of the revised Terms. If you do not agree, stop using the Service and cancel any paid subscription.

17. Contact

FormHeron is operated by an individual in India. For questions about these Terms, account issues, or abuse reports: [email protected]. We aim to respond within a few business days.

For copyright or intellectual-property complaints about content hosted via the Service, email the same address with "IP Complaint" in the subject line, a description of the work, the location (URL or form/submission identifier if known), and your contact details. We will review good-faith notices and may remove content or suspend accounts as appropriate.

These Terms describe the product relationship for transparency and risk allocation. They are not a substitute for legal advice. Have counsel review enforceability for your jurisdiction, especially if you process EU or other regulated personal data at scale.