Pabble ("we", "our", or "us") operates a form-building and response-automation platform available at pabble.app. Because our platform processes data you collect from others, we hold data privacy to a high standard. This Privacy Policy describes what information we gather, how we use it, with whom we share it, and the controls you have over it.
1. Definitions
"Service" means the Pabble platform, including the Form Builder, Flow Builder, dashboard, and all associated APIs.
"You" / "Account Holder" means the individual or organisation that registers for and uses the Service.
"Respondent" means any individual who completes a form published through the Service.
"Response Data" means the information a Respondent submits via a form you have created.
2. Information We Collect
2.1 Account and Profile Data
When you register, we collect your name, email address, and a hashed password. If you upgrade to a paid plan, billing details (card number, expiry) are collected and stored exclusively by our payment processor, we receive only a tokenised reference.
2.2 Form and Flow Configuration
We store the forms you design, including field definitions, branching logic, and any flow automation rules you configure, such as webhook endpoints, email templates, and conditional routing steps. This data belongs to you.
2.3 Response Data
All submissions made through your published forms are stored in your account. You are the data controller for this information; we act solely as a data processor executing your instructions. It is your responsibility to ensure respondents are informed about how their submissions will be used.
2.4 Usage and Activity Data
We record interactions within the Service, features accessed, forms published, flows triggered, errors encountered, and support tickets raised, to diagnose problems and improve the product.
2.5 Technical and Device Data
Our servers automatically log IP addresses, browser type and version, operating system, referring URLs, and timestamps. This is standard infrastructure data retained for security monitoring and abuse prevention.
3. How We Use Your Information
- Service delivery: rendering forms, capturing submissions, executing flow automations, and sending any notifications your flows trigger.
- Account management: authentication, billing, plan enforcement, and responding to support requests.
- Product improvement: analysing aggregate, anonymised usage patterns to guide feature development and performance optimisation.
- Security: detecting fraud, abuse, and unauthorised access attempts.
- Legal compliance: meeting obligations under applicable Indian law and, where applicable, international data protection frameworks.
4. Response Data: Your Obligations
When your forms collect personal information from Respondents, you assume responsibility as the data controller. This includes:
- Providing Respondents with a clear notice of how their data will be used.
- Obtaining appropriate consent before collecting sensitive categories of information.
- Honouring any requests from Respondents to access, correct, or erase their submitted data. You can facilitate this directly from your dashboard.
5. Data Sharing and Disclosure
We do not sell personal data. We share information only in the following circumstances:
- Infrastructure and service providers: cloud hosting, payment processing, email delivery, and analytics vendors who operate under data processing agreements and may only process data for the purposes we specify.
- Legal obligations: when required by Indian law, a valid court order, or a regulatory body with jurisdiction over our operations.
- Business restructuring: if Pabble undergoes a merger, acquisition, or asset sale, your data may be transferred as part of that transaction. We will provide advance notice and ensure the incoming entity is bound to equivalent privacy standards.
- With your explicit consent: for any purpose not covered above.
6. Cookies and Tracking Technologies
We use cookies and similar mechanisms to operate the Service, remember your preferences, and measure platform performance. Please read our Cookie Policy for a complete breakdown of the technologies we use and how to control them.
7. Data Retention
Account data is retained for the lifetime of your account and purged within 30 days following a confirmed deletion request. Response Data is governed by your plan's storage allowance; you may delete individual responses or entire form datasets from your dashboard at any time. Anonymised, aggregated data may be retained indefinitely for analytics purposes and cannot be linked back to any individual.
8. Security Measures
We protect data using industry-standard safeguards: transport-layer encryption (TLS) for all data in transit, encryption at rest for stored sensitive fields, role-based access controls limiting internal data access, and periodic security reviews. That said, no internet-connected system is impervious to all threats. In the event of a breach that affects your data, we will notify you as required by applicable law.
9. Your Rights
Depending on your jurisdiction, you may be entitled to:
- Access: receive a copy of personal data we hold about you.
- Correction: request that inaccurate or incomplete data be updated.
- Erasure: ask us to delete your personal data, subject to legal retention requirements.
- Portability: obtain your data in a structured, machine-readable format.
- Restriction: request that we limit processing in specific circumstances.
- Objection: object to processing carried out under a legitimate-interest basis.
To exercise any of these rights, email us at harshkanjiya001@gmail.com. We will acknowledge your request within 72 hours and resolve it within 30 days.
10. Children's Privacy
The Service is intended for adults (18 and older). We do not knowingly collect personal information from minors. If we learn that data from a person under 18 has been collected without verifiable parental consent, we will delete it without delay.
11. International Data Transfers
Pabble is headquartered in India and primarily processes data on servers located in India. Some of our third-party service providers operate in other jurisdictions. Where personal data is transferred outside India, we rely on appropriate safeguards such as standard contractual clauses to protect it during transfer.
12. Third-Party Links
Forms published through the Service, and pages within the dashboard, may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies before providing any personal information.
13. Policy Updates
We may revise this Privacy Policy as the Service evolves or legal requirements change. Material updates will be communicated via email and an in-app notice at least 14 days before they take effect. The version date at the top of this page reflects the most recent revision.
14. Contact Us
For any privacy-related queries, data requests, or complaints, reach us at harshkanjiya001@gmail.com. We take every inquiry seriously and aim to respond promptly.