← EzFormBuilder
Privacy Policy
Effective June 6, 2026
1. Roles
RodyWorks LLC, a California limited liability company doing business as EzFormBuilder (“we”, “us”), of Lompoc, California, processes account, billing, and operational data as a controller. For content you collect from your own respondents and signers (“Your Content”), you are the controller and we act as your processor on your instructions; for regulated data, the executed Business Associate / Data Processing Agreement governs.
2. What we collect
Account data (name, email, organization, role, authentication data — passwords are hashed and two-factor secrets are stored encrypted; session/IP/user-agent); billing data (plan/status; card data is handled by our payment processor — we don’t store full card numbers); Your Content (some tiers are client-side encrypted and unreadable by us); usage/diagnostic logs; and cookies/local storage (session, theme, language).
3. How we use it
To operate and secure the Service, authenticate users, process payments, provide support, send service messages, prevent abuse/fraud, meet legal obligations, and improve the Service.
4. Sharing
We share data with sub-processors that help run the Service (cloud hosting, email, payments, translation), bound by data-protection terms, and as required by law. We do not sell personal information, and we do not use student data for advertising or secondary purposes.
5. Security & encryption
We use encryption in transit and at rest, least-privilege database roles, append-only audit logs, administrator two-factor authentication, an isolated compliance database, and cloud detective controls. Standard, HIPAA, and FERPA tiers encrypt content so only authorized key-holders can read it. No method is 100% secure.
6. Retention
We retain account and billing data for the life of the account plus a period required for legal and accounting needs. Your Content is retained per your settings and any BAA/DPA terms; deletions propagate as backups expire.
7. Your rights
Depending on where you live (e.g., GDPR, CCPA/CPRA), you may have rights to access, correct, delete, port, or restrict your data, and to withdraw consent. For Your Content where we act as processor, direct requests to the relevant account holder. Contact privacy@ezformbuilder.com.
8. Children
The Service is not directed to children except within an authorized education context governed by a Data Processing Agreement.
9. Changes & contact
We will post updates with a new effective date and notify you of material changes. Questions: privacy@ezformbuilder.com.
This policy is being finalized as we expand; we may update it. See also our Terms of Use.