Privacy Policy

Ranobi is a form builder with a database underneath. We collect what we need to run it and no more. We do not sell personal information, we do not show ads, and we do not use third-party advertising or tracking cookies.

Information you give us

• Account information: your email address. If you sign in with Google, we also receive your name and profile picture from Google. We never receive your Google password.
• Guest sessions: if you try Ranobi without an account, we create an anonymous session so your forms are saved. When you sign up, those forms move into your account.
• Your forms: drafts, published versions, themes, images you upload, folders, workspaces, and the people you invite to them.
• Communications: messages you send us by email or through support.

Responses to forms

When someone fills in a form built with Ranobi, we store their answers and any files they upload, along with the form version they answered. We hold this on behalf of the form's owner (see Section 3).

Information collected automatically

• Form views: when a published form is opened, we record the view with its referring site and any UTM tags, so the owner can see where responses come from.
• Log data: IP address, request times, and error details. We use IP addresses to apply rate limits and stop abuse.
• Cookies: see Section 8.

If you publish a form, you decide what it asks and what happens to the answers. For the responses you collect, you are the controller and Ranobi processes them on your behalf, only to run the Service for you.

You are responsible for having a lawful reason to collect what your form asks for and for telling respondents how you will use their answers. If you are a respondent and want your answers changed or deleted, contact the form's owner. If you can't reach them, write to us and we will pass the request on.

We use information to:

• Provide, operate, and maintain the Service
• Create and manage your account, workspaces, and invitations
• Store your forms, publish them, and collect and show their responses
• Send the emails and notifications you set up, and service emails such as sign-in links
• Run the integrations you connect
• Run the AI form builder when you use it
• Detect, prevent, and investigate abuse, spam, and security incidents
• Enforce our Terms & Conditions and comply with legal obligations

We do not use your forms, your responses, or your prompts to train AI models.

When you use the editor's chat to build or change a form, your message and the form you're working on are sent through OpenRouter to the AI model that answers it. We send only what is needed for the answer, never your password or your form's responses.

If you don't want something processed this way, leave it out of your message.

You can connect other apps, such as Google Sheets, Google Drive, Slack, Discord, Telegram, Notion, Airtable, HubSpot, Pipedrive, Linear, Webflow, Contentful, and Zapier. When you do:

• We store the access tokens those apps give us, encrypted (AES-256-GCM)
• We send the responses, notifications, or files you chose to the app you chose, when you chose
• Each app handles that data under its own terms and privacy policy

Google Sheets and Google Drive: we can open only the spreadsheets and files Ranobi creates and the spreadsheets you choose in Google's file picker, nothing else in your Drive. We use that access only to add your responses and their files to them. Ranobi's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect an app at any time from Settings → Integrations. We then stop sending to it and delete its tokens.

We share information only with:

• Service providers who run parts of the Service for us: Cloudflare (hosting and network), Supabase (database, sign-in, and file storage), Resend (email), OpenRouter (AI form builder), and Google (Google sign-in, and Google Sheets and Google Drive when you connect them). Each is bound by confidentiality and data-protection obligations.
• The apps you connect, as described in Section 6.
• Legal and safety recipients, where the law, a court order, or the protection of our users or the public requires it.
• A buyer or successor, if Ranobi is part of a merger, acquisition, or sale of assets. We will tell you before your information becomes subject to a different privacy policy.

We do not sell or rent personal information.

• Essential cookies: keep you signed in and secure. The Service doesn't work without them.
• Preference cookies: remember small choices, such as whether the sidebar is collapsed, how the dashboard is laid out, and that this browser has signed in before.

We don't use advertising or third-party analytics cookies. You can block cookies in your browser settings, but signing in will stop working.

Our database and file storage are hosted in Mumbai, India. Some of our providers, such as our hosting network and email and AI providers, may process information in other countries, including the United States. Where the law requires it, we rely on appropriate safeguards for these transfers.

We protect information with encryption in transit (HTTPS), encrypted integration tokens, access controls on every form and workspace, and server-side checks on every response.

No system is perfectly secure. If a breach affects your personal information, we will tell you and the relevant authorities as the law requires.

We keep your account and forms while your account is active. Responses stay until the form's owner deletes them or the form. When you ask us to delete your account, we delete its information, except where we must keep some of it to meet legal obligations, resolve disputes, or prevent abuse.

Depending on where you live, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your personal information
• Export your data in a portable format
• Object to or restrict certain processing
• Withdraw consent where we rely on it

To use any of these, email support@ranobi.com. We'll reply within the time the law requires, usually 30 days, and may need to confirm your identity first.

Users in India: under the Digital Personal Data Protection Act, 2023, you may also nominate someone to exercise your rights if you die or become unable to, and raise a grievance with us (see Contact) before approaching the Data Protection Board.

Users in the EEA and UK: you may also complain to your local data protection authority.

The Service is not meant for children under 13, and we don't knowingly collect their personal information. If you believe a child has given us information, write to support@ranobi.com and we will delete it.

We may update this policy. Changes will show in the "Last updated" date above and, when they matter, we'll announce them in the Service or by email. Using the Service after a change takes effect means you accept it.

For privacy questions, requests, or grievances:

Ranobi, Bengaluru, Karnataka, India, support@ranobi.com