Data protection

Privacy notice

This notice explains how personal data are processed when you visit this website or contact FORM II.

Controller

Email: info@formtwo.ai

Website hosting and server logs

This website is hosted for us by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, United States. Vercel acts as our processor under Article 28 GDPR. Pages are delivered through Vercel’s global content-delivery network, so technical request data may be processed at locations inside and outside the European Economic Area.

When you access the website, the hosting systems process technical request data needed to deliver and secure it. This may include your IP address, the requested domain and page, date and time, browser or user-agent information, referrer, and HTTP status code.

We process these data to provide a reliable and secure website, detect faults, and defend against misuse. The legal basis is Article 6(1)(f) GDPR. Our legitimate interests are the secure, stable, and efficient operation of this website.

Vercel retains operational logs according to the settings of the hosting product. We do not create additional log copies. A longer retention may occur only where needed to investigate a specific security incident or comply with a legal obligation.

Enquiries by email

If you contact us, we process the contact details and other information you provide to answer your enquiry and manage the resulting business relationship.

Where your enquiry concerns a possible or existing contract, the legal basis is Article 6(1)(b) GDPR. For other business communication, the legal basis is Article 6(1)(f) GDPR; our legitimate interest is responding to and documenting business enquiries. Where retention is required by law, Article 6(1)(c) GDPR also applies.

We delete enquiry data when the matter has been concluded and the data are no longer needed. Data are retained for longer only where statutory retention periods apply or where they are needed to establish, exercise, or defend legal claims. Recipients may include email, hosting, and IT service providers acting on our instructions.

Website enquiry form

The enquiry form sends the details you enter to FORM II by email, so we can reply. The message includes your name, work email, organisation, role if you give one, the challenge, the outcome, and the timeframe.

Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, United States, delivers that email through its Resend service and acts as our processor under Article 28 GDPR. Resend stores the message and its delivery logs in the United States and keeps them for the retention period of our account. On the Free, Pro, and Scale plans that period is 30 days. We do not keep a separate copy of the submission on this website.

The purposes, legal bases, retention, and recipients described under Enquiries by email apply to the copy we receive.

Web Analytics

We use Vercel Web Analytics, provided by Vercel Inc. as our processor, to understand how this website is used. It does not use cookies or similar storage on your device, and it does not track you across other websites.

A script served from this website reports page views to Vercel. A short-lived hash derived from the incoming request is used to distinguish visits for up to 24 hours and is then discarded. For each page view, aggregated information may be processed, such as the page URL, referrer, approximate location derived from the IP address (country, region, or city), device type, operating system, and browser. These data are not stored in a form that identifies you as an individual.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is measuring the reach and technical use of this website so we can operate and improve it. You may object to this processing as described under Your rights.

Cookies, fonts, and images

This website does not use cookies or similar tracking technologies that store information on your device. Fonts and images are served from the same website and are not requested from third-party providers.

External links

The team page contains links to LinkedIn. No data are sent to LinkedIn merely because you visit this website. If you follow a link, LinkedIn processes data under its own responsibility and privacy terms.

Recipients and international transfers

We disclose personal data only where this is necessary for the purposes described above, required by law, or carried out by a service provider under our instructions. Vercel and Resend may use subprocessors in accordance with their data-processing agreements.

Vercel and Plus Five Five, Inc. (Resend) are established in the United States. Transfers of personal data to the United States are based on each company’s certification under the EU-U.S. Data Privacy Framework and, where required, the Standard Contractual Clauses under Article 46 GDPR. Further information is available in Vercel’s privacy policy (opens in a new tab) and Resend’s privacy policy (opens in a new tab).

Your rights

Subject to the applicable legal conditions, you have the right to access your personal data, have inaccurate data corrected, request erasure or restriction of processing, receive data you provided in a portable format, and object to processing based on Article 6(1)(f) GDPR. You may exercise these rights by contacting info@formtwo.ai.

You also have the right to lodge a complaint with a data-protection supervisory authority. The authority responsible for us is:

Submit a complaint to the LDI NRW (opens in a new tab)

Automated decisions

We do not use automated decision-making or profiling in connection with this website.

Changes to this notice

We will update this notice if the website, its service providers, or the applicable legal requirements change.

Last updated: 22 September 2026.