Privacy Policy

Last updated: 9 October 2026

1. Who we are

FormPesa ("we", "us") is a form-builder and M-Pesa payment collection service operated at formpesa.online. This policy explains what we collect, why, and your rights.

2. Information we collect

Account information — when you sign up (email, name, business name) or sign in with Google, we receive your Google account email and name.

Form data — responses submitted through forms hosted on FormPesa, including any personal details visitors choose to provide.

Payment data — phone numbers and transaction references used for M-Pesa STK Push. We do not store M-Pesa PINs or card numbers. Payments settle directly to the merchant's M-Pesa account via Fortpesa, Daraja, or PalPluss; we never hold funds.

Technical data — standard server logs (IP address, browser, pages visited) used for security and reliability.

3. How we use your information

  • Provide and improve the FormPesa service
  • Authenticate you and secure your account
  • Process form submissions and surface payment status to merchants
  • Send transactional emails (welcome, password reset)
  • Comply with legal obligations

4. Google account data

If you sign in with Google, we receive your Google email address, name, and account identifier from the openid email profile scopes. We use this only to create or access your FormPesa account. We do not request access to Gmail, Drive, Calendar, or any other Google data.

5. Sharing

We share data only with:

  • Payment providers (Fortpesa, Safaricom Daraja, PalPluss) — solely to initiate and confirm M-Pesa transactions you or your customers request
  • Email delivery (Brevo) — for transactional messages
  • Google — only the OAuth redirect; no form data is sent to Google

We do not sell personal data.

6. Data retention

Account data is kept while your account is active. Form submissions are retained for as long as the merchant's plan allows, or until deleted. You can request deletion at any time.

7. Your rights

You may request access to, correction of, or deletion of your personal data by contacting privacy@formpesa.online. You may also disconnect Google sign-in at any time by setting a password and removing the Google link from your account settings.

8. Security

We use HTTPS, hashed passwords, signed webhooks, and session hardening. No system is perfectly secure; please use a strong password and protect your Google account.

9. Changes

We may update this policy. Material changes will be noted by the "Last updated" date above. Continued use after changes means you accept the revised policy.

10. Contact

Questions about privacy: privacy@formpesa.online