Privacy Policy
I. Data Controller
SimpleApiForm (hereinafter, "the Company", "we", or "SimpleApiForm"), headquartered in Lima, Republic of Peru, is responsible for the personal data bank of its users and for the processing of the information described in this document. For any inquiry or exercise of rights related to your personal data, you may contact us at [email protected].
II. Applicable Legal Framework
The processing of personal data carried out by SimpleApiForm is governed by Law No. 29733, the Personal Data Protection Law, and its Regulations approved by Supreme Decree No. 003-2013-JUS, as well as by any rules that may amend, supplement, or replace them. By registering and using the service, the data subject grants their prior, informed, express, and unequivocal consent for the processing described in this document, as required by Article 18 of Law No. 29733.
III. Personal Data Collected
In connection with registration and use of the service, SimpleApiForm collects and stores the following personal data: full name and email address of the user; platform usage data, including created endpoints, volume of processed submissions, and established configurations; technical connection information, such as IP address, browser type, operating system, and standard web access logs; and billing data required for the management of the contracted plan, which is processed directly by our certified payment provider. SimpleApiForm does not store or have access to users' full credit or debit card numbers.
Additionally, SimpleApiForm processes data contained in form submissions received through the user's account. With respect to this data, the Company acts as a data processor, and the user remains solely responsible for its collection, lawfulness, and compliance with applicable legal obligations toward their own end users.
IV. Purposes of Processing
The personal data collected is processed for the following purposes: the provision, maintenance, and improvement of the form backend service; user account management and payment processing; the sending of transactional communications related to the service, such as registration confirmations, usage alerts, and notifications of relevant service changes; the creation of aggregated usage statistics for platform optimization; compliance with applicable legal obligations in Peru; and, exclusively with the user's separate and express consent, the sending of commercial and marketing communications related to SimpleApiForm. This consent may be revoked at any time from the account settings, without affecting the provision of the service.
V. Legal Basis for Processing
The processing of the user's personal data is based on the execution of the contractual relationship established at the time of registration and acceptance of the Terms and Conditions of service, compliance with applicable legal obligations of SimpleApiForm, and, in expressly indicated cases, the free, prior, and informed consent of the data subject.
VI. Data Retention
The user's personal data will be retained for as long as the account remains active. Once the user requests the cancellation of their account, SimpleApiForm will retain their data for an additional period of twenty-four (24) months, a period necessary to address potential claims, comply with legal obligations, and enforce the Company's rights arising from the contractual relationship. After this period, the data will be securely and irreversibly deleted from the Company's systems.
VII. Data Transfers and Third-Party Disclosures
SimpleApiForm does not sell, lease, or transfer users' personal data to third parties for commercial purposes. However, for the proper provision of the service, the Company may transfer personal data to the following data processors: technology infrastructure and cloud storage providers, located in the United States of America and/or the European Union, bound to SimpleApiForm by confidentiality and data processing agreements that limit data use to the Company's instructions; the payment service provider, for secure transaction processing; and Amazon Web Services, through its Amazon Simple Email Service (SES), for sending transactional notifications. SimpleApiForm may also disclose personal data when required by judicial, tax, or administrative authorities acting within their legal powers, or when necessary to defend the Company's legitimate rights and interests.
VIII. Security Measures
SimpleApiForm has implemented the technical and organizational measures necessary to ensure the security of personal data and prevent its alteration, loss, processing, or unauthorized access, as required by Law No. 29733 and its Regulations. These measures include encryption of data at rest and in transit using industry-standard protocols, role-based access controls, and continuous security monitoring. Nevertheless, the Company notes that no system for transmitting or storing information over the Internet can guarantee absolute security.
IX. Use of Cookies
SimpleApiForm uses strictly necessary cookies for the operation of the service, such as authentication and session management cookies, as well as usage analytics cookies that allow the Company to understand user behavior on the platform for service improvement purposes. Users may configure their browser to reject or delete cookies; however, this may affect the proper functioning of certain service features.
X. Minors
SimpleApiForm is not directed at persons under the age of eighteen (18). The Company does not knowingly collect personal data from minors. If it is detected that data from a minor has been collected without proper authorization, such data will be immediately deleted.
XI. Data Subject Rights — ARCO Rights
In accordance with Law No. 29733 and its Regulations, the data subject has the right to access their data and to know the conditions under which it is processed; to rectification of inaccurate, incomplete, or misleading data; to cancellation when the data is no longer necessary for the purpose for which it was collected or when the retention period has expired; and to object to the processing of their data for certain purposes, including the sending of commercial communications.
To exercise any of these rights, the data subject must send a request to [email protected], indicating their full name, the right they wish to exercise, and, where applicable, documentation evidencing their identity or representation. SimpleApiForm will respond to the request within a maximum of twenty (20) business days from receipt, in accordance with Article 24 of Law No. 29733.
If the Company fails to respond within the legal deadline or denies the exercise of a right without justification, the data subject may file a complaint with the National Authority for Personal Data Protection, through the filing office of the Ministry of Justice and Human Rights, located at Calle Scipión Llona No. 350, Miraflores, Lima, Peru.
XII. Changes to This Privacy Policy
SimpleApiForm reserves the right to modify this Privacy Policy at any time. Any modification that substantially affects the rights of data subjects will be notified by email to the address registered in the user's account, at least fifteen (15) calendar days before it takes effect. Continued use of the service after such notification will constitute acceptance of the modified policy.