Privacy Policy

Introduction

Doctoform (doctoform.com) is a service that converts Excel and Word questionnaires into Google Forms and Microsoft Forms. This Privacy Policy explains what data we collect, how we use it, and the choices you have. By using Doctoform you agree to the practices described here.

Data Controller

Doctoform is operated by an individual developer (a private person), reachable at antalizn@gmail.com. For any privacy-related question or request, please contact us at this address.

Data We Collect

We process the following data:

• Documents you upload (.docx, .xlsx, .pdf) and the questionnaire data extracted from them;
• When you sign in with Google: your name, email address and profile picture;
• OAuth tokens, which are stored encrypted.

Use of Google User Data

When you sign in with Google, Doctoform requests the following OAuth scopes and uses them only for the stated purposes:

• userinfo.email, userinfo.profile — to sign you in and identify you;
• forms.body — to create a Google Forms form on your behalf;
• forms.responses.readonly — (optional) to read the responses of a form created by the app;
• drive.file — to manage the files created by the app in your Drive;
• drive.readonly — to download a file you select in the Drive picker so it can be processed.

How We Use Your Data

We use your data to operate the service: to process your uploaded documents, generate forms, authenticate you, and (only after cookie consent) to measure traffic. We do not use your data for advertising and we do not sell it.

Data Sharing

We do not sell your personal data to third parties. We rely on the following data processors to operate the service:

• Google (Google Forms and Google Drive APIs);
• our hosting provider.

Cookies

We use:

• an anonymous session cookie (anon_session, retained for 1 year);
• a sign-in cookie (access_token);
• Google Analytics, loaded only after you give cookie consent (Consent Mode v2).

Data Retention

We store the documents you upload and the questionnaires we generate for as long as needed to operate the service. You may request deletion of your data at any time by contacting us at antalizn@gmail.com.

Security

We take reasonable technical measures to protect your data. OAuth tokens are stored encrypted. No method of transmission or storage is completely secure, but we strive to protect your information.

Your Rights

Under the GDPR you have the right to access, rectify, erase and port your personal data. To exercise these rights, contact us at antalizn@gmail.com.

Children

Doctoform is not directed to children under 16. We do not knowingly collect personal data from children under 16.

Changes to This Policy

We may update this Privacy Policy from time to time. The date of the latest revision is shown at the top of this page.

Contact

For any question about this Privacy Policy, contact us at antalizn@gmail.com.