Privacy for a product that remembers form answers.
This policy explains what data FormMoi by BuzzChat collects, how AI is used, how extension data moves through the service, and how you can control your account.
Effective date: May 20, 2026
You stay in control
FormMoi fills fields, but it never submits final forms for you.
Sources are visible
Suggested answers show context, source, and confidence wherever possible.
Private means reviewed
Marked private fields are gated, encrypted, and redacted from fill history.
1. Who we are
FormMoi by BuzzChat is operated by BuzzChat, a trading name of Buzz Innovations Ltd., registered in England and Wales (Company No. 17212684).
For privacy questions, data requests, or security concerns, contact support@formmoi.com.
2. What FormMoi does
FormMoi helps you keep reusable personal details, work context, application answers, and form history in one account so the browser extension can suggest and fill matching fields.
FormMoi fills fields only when instructed or when you enable preparation behavior in the extension. It does not submit forms on your behalf.
3. Personal data we collect
Account data: name, email address, avatar if available, authentication identifiers, plan, subscription status, and account timestamps.
Profile and context data: information you save in your profile, including contact details, addresses, employment details, education, skills, preferences, custom fields, and context-specific overrides.
Private-field data: values you mark as private, such as identity document numbers or emergency contact details. Marked private fields are designed to be encrypted before storage and shown only after confirmation flows.
Extension data: page URL, domain, page title, field labels, placeholders, autocomplete attributes, field type, nearby form text, confidence scores, and fill decisions needed to detect and fill form fields.
Source and learning data: raw source text you paste into FormMoi, extracted answer-bank entries, answers you type manually, reviewed corrections, application workspaces, and domain preferences, where you have enabled learning behavior.
Billing and support data: checkout status, payment provider identifiers, invoices or receipts from payment processors, support messages, and operational logs.
Device and usage data: IP address, browser or device metadata, request logs, error logs, token events, feature usage, and security events.
4. How we use personal data
To create and maintain your account, profile, contexts, answer bank, application workspaces, extension connection, and fill history.
To detect form fields, match them to saved answers, show source labels and confidence scores, and fill fields when you choose to proceed.
To learn from reviewed corrections and manually typed answers when learning is enabled, so similar questions can be answered more accurately later.
To manage subscriptions, enforce plan limits, process payments, send receipts, provide support, secure the service, investigate abuse, and improve reliability.
5. AI processing
AI inference happens on FormMoi servers. The extension does not receive or store OpenAI API keys.
When a form label is unclear, FormMoi may send field metadata, selected profile context, relevant answer-bank data, and source-derived entries to AI providers so it can suggest the best matching answer.
When you import a raw source document, FormMoi may send that source text to AI providers to extract reusable application answers. Do not paste data you do not have permission to process.
If better form detection is enabled, FormMoi may process a simplified, redacted representation of the page structure to understand labels, sections, and question context.
AI suggestions can be incomplete or wrong. You are responsible for reviewing answers before submitting any form.
6. Lawful bases
Contract: to provide the FormMoi account, dashboard, extension connection, profile storage, fill suggestions, billing, and support.
Legitimate interests: to secure the service, prevent abuse, understand product usage, improve field matching, maintain logs, and communicate important account updates.
Consent: where you choose optional behaviors such as email links, learning from manually typed answers, marketing messages, or better form detection where consent is required.
Legal obligation: where we must keep billing, tax, security, or compliance records.
7. Who we share data with
We use service providers for hosting, database storage, authentication, payments, AI processing, email delivery, analytics or logs, and browser extension distribution.
Current processor categories include Firebase or Google Cloud services, OpenAI, Stripe, Resend, Vercel, and Chrome Web Store or browser platform services.
We may share data if required by law, to protect rights and security, or as part of a merger, financing, acquisition, or sale of business assets.
8. International transfers
Our service providers may process personal data outside the United Kingdom or your country of residence.
Where required, we rely on adequacy decisions, standard contractual clauses, data processing agreements, or similar safeguards provided by our processors.
9. Retention
Profile, context, answer-bank, and application workspace data is kept while your account is active, unless you delete it sooner.
Fill history is retained according to your plan limits and account settings. Private field values should be redacted from history entries.
Billing, security, audit, and legal records may be kept for longer where needed for accounting, fraud prevention, dispute handling, or legal compliance.
When you delete your account, we aim to delete or anonymize account data within a reasonable period unless retention is legally required.
10. Your rights
Depending on your location and the lawful basis for processing, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal data.
You can ask us to stop optional processing based on consent. Consent can be withdrawn through product settings where available or by contacting us.
If you are in the UK and believe we have not handled your data fairly, you can complain to the Information Commissioner's Office.
11. Cookies and extension storage
The web app uses cookies or similar storage for authentication, security, preferences, and product operation.
The Chrome extension uses chrome.storage.local for settings such as active context, browser connection token, profile cache, blocked domains, and feature toggles. Do not paste tokens into websites or share them with anyone.
12. Security
We use technical and organizational measures designed to protect personal data, including server-side authentication checks, hashed extension tokens, redaction of private fill history values, and encryption flows for marked private fields.
No online service can guarantee absolute security. Tell us promptly if you believe your account, browser, token, or device has been compromised.
13. Changes
We may update this policy as FormMoi changes. If changes materially affect your rights or how we use personal data, we will provide notice in the product or by email where appropriate.