FormSwitch - Privacy Policy
FormSwitch Privacy Policy
Effective date: August 13, 2026
This Privacy Policy explains how Otheriver Apps ("Otheriver Apps", "we", "us") collects, uses, and protects information when merchants install or use FormSwitch (the "App"). Contact us at apps@otheriver.com.
Information we process
- Shop and installation information supplied by Shopify, including the shop domain, installation session, and access credentials required to operate the App.
- Form content and settings created by the merchant, including fields, conditional rules, styles, publication status, and form handles.
- Responses submitted through forms published by the merchant. The content depends on the fields configured by the merchant and may include personal information.
- Technical information needed for security, troubleshooting, and service operation, such as request metadata and server logs.
How we use information
We process information to provide, secure, maintain, and improve the App; authenticate installations; display and submit forms; enforce the selected plan; provide statistics; respond to support requests; prevent abuse; and comply with legal obligations.
Roles and merchant responsibilities
The merchant determines which information is requested through each form and why it is collected. For submitted form responses, the merchant generally acts as data controller and Otheriver Apps acts as a service provider or processor. Merchants are responsible for giving storefront visitors appropriate notices, obtaining any required consent, and handling requests relating to the data they collect.
Service providers and disclosures
We use Shopify to distribute and authenticate the App and Railway and its database infrastructure to host the service and store App data. These providers process information on our behalf under their own contractual and security terms. We may also disclose information when required by law, to protect legal rights or service security, or as part of a business transaction subject to appropriate safeguards. We do not sell personal information and do not use submitted responses for advertising.
International transfers
Our service providers may process information in countries other than the merchant's or visitor's country. Where required, transfers are protected through contractual safeguards or other lawful transfer mechanisms provided by the relevant service provider.
Retention and deletion
Form configurations and submitted responses are retained while the merchant uses the App. Deleting a form removes its related submissions. Uninstalling the App or completing a verified Shopify shop-data deletion request deletes the store's forms, submissions, and App sessions from the active service. Limited copies may remain temporarily in encrypted backups or security logs until the applicable provider's normal retention cycle expires.
Security
We use reasonable administrative and technical safeguards designed to protect information, including authenticated Shopify requests, signed app proxy requests, encrypted network connections, and store-level data separation. No method of storage or transmission is completely secure.
Your rights and choices
Depending on applicable law, individuals may have rights to access, correct, delete, restrict, or object to processing of their personal information. Storefront visitors should first contact the merchant that collected their response. Merchants and individuals may also contact us at apps@otheriver.com. We may need to verify a request before acting on it.
Changes
We may update this policy to reflect changes to the App, our providers, or legal requirements. The effective date above identifies the latest version.