Privacy Policy

RodyWorks LLC, a California limited liability company doing business as EzFormBuilder (“we”, “us”), of Lompoc, California, processes account, billing, and operational data as a controller. For content you collect from your own respondents and signers (“Your Content”), you are the controller and we act as your processor on your instructions; for Controlled Unclassified Information, the accepted CUI Contract Flow-Down Agreement governs.

Account data (name, email, organization, role, authentication data — passwords are hashed and two-factor secrets are stored encrypted; session/IP/user-agent); billing data (plan/status; card data is handled by our payment processor — we don’t store full card numbers); Your Content (content on forms set to standard encryption is encrypted in the respondent’s browser and is unreadable by us); usage/diagnostic logs; and cookies/local storage (session, theme, language).

To operate and secure the Service, authenticate users, process payments, provide support, send service messages, prevent abuse/fraud, meet legal obligations, and improve the Service.

We share data with sub-processors that help run the Service (cloud hosting, email, payments, translation), bound by data-protection terms, and as required by law. We do not sell personal information, and we do not use Your Content for advertising or other secondary purposes.

We encrypt data in transit and at rest, limit and log access to it, and require two-factor authentication for platform administrators. Encryption is selected per form, with a CUI option for work under a DFARS 252.204-7012 contract. Controls are built to NIST SP 800-171. Further detail is available to customers and assessors under a confidentiality agreement. No method is 100% secure.

We retain account and billing data for the life of the account plus a period required for legal and accounting needs. Your Content is retained per your settings and the terms of any agreement covering it; deletions propagate as backups expire.

Depending on where you live (e.g., GDPR, CCPA/CPRA), you may have rights to access, correct, delete, port, or restrict your data, and to withdraw consent. For Your Content where we act as processor, direct requests to the relevant account holder. Contact privacy@ezformbuilder.com.

The Service is not directed to children and accounts require users to be at least 18.

We will post updates with a new effective date and notify you of material changes. Questions: privacy@ezformbuilder.com.