Privacy Policy
FormFlow Pro's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
1. Overview
FormFlow Pro (the Add-on) is a Google Workspace Marketplace add-on built by Dynamic Minds Group. It upgrades Google Forms™ with live seat limits per option, an appointment booking calendar with time zones, quiz and per question timers, an exam focus guard, email code verification, ordering and sorting question types, conditional thank you messages, registration numbers and instant translation for respondents.
This policy explains what data the Add-on accesses, why, and how it is protected. We do not sell, share or monetise any personal data.
2. Compliance with the Google API Services User Data Policy
FormFlow Pro's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements. In addition, we commit to the following.
No AI or ML training
Information received from Google Workspace APIs is never used to develop, improve or train generalised or non personalised AI or ML models, and is never used for advertising or profiling. We do not use, transfer or sell any user data obtained from Google Workspace APIs for these purposes. FormFlow Pro contains no AI or ML component and calls no AI service of any kind.
No human review
No employee, contractor or third party of Dynamic Minds Group reads or has access to the contents of a user's form, its questions or its responses, except as strictly necessary to provide support at the user's explicit request, to comply with applicable law, or to maintain operational security and prevent abuse.
Momentary processing, minimum retention
Our service holds only the display setup needed to show your form page, and briefly processes each submission while handing it into your own Google Form. Delivered submissions are removed automatically. We keep no database of responses. Full retention periods are set out in section 10.
No advertising, no third party transfer
User data is never sold, transferred or used for advertising, retargeting, interest based advertising, lending, credit scoring, or any purpose other than providing or improving the Add-on's user facing functionality. We do not transfer Google user data to data brokers, advertisers or information resellers.
3. What data we access
Your Google account
- Email address, to identify the account holder for licence verification and support. Collected only after you explicitly accept the in-app consent screen.
- Display name, to personalise your experience and prefill the consent screen. You may edit or remove it before activating.
Google Forms, current form only
- Current form only. The Add-on uses the forms.currentonly permission, a sensitive scope. It can access only the single form it has been opened in. It cannot see, open, list or modify any other form, file or document in your account.
- Question structure. Titles, options and question types are read so you can configure seat limits, booking slots, timers, thank you rules and translations, and so the FormFlow respondent page can be rendered.
- Response submission. When a respondent submits on the FormFlow page, the Add-on writes that response into the same form, exactly as if it had been submitted natively. Responses are counted for seat capacities, but their content is never stored on our servers.
- Question creation. When you add an ordering, sorting or booking question, or ask the Add-on to create a hidden tracking question for a registration number, score or verified email, it creates a question inside the same form to hold those answers.
4. Where data is stored
We maintain no central database of form content or respondent data. This table is the complete picture.
| Data type | Where it is stored | Who can access it |
|---|---|---|
| Form questions and options | Your own Google Form. The FormFlow page renders them from its display setup | You only. No human review at DMG |
| Respondent answers | Your own Google Form and linked Sheet. Held momentarily in transit through the FormFlow service and removed automatically on delivery | You control sharing |
| Feature configuration: capacities, booking slots, rules, timers, languages | The Add-on's storage inside your own Google account | You only |
| Seat and slot counters | The FormFlow service, as counts only, with no respondent identity attached | You only |
| Operational data for licensing: your name and email, the form's ID and title, feature counts and a response count as a number only | DMG secure server, held only to run your licence and support. No respondent identity or answer content is ever sent | DMG support team |
5. Email verification codes
When you switch on email verification, a six digit code is emailed to the respondent. In normal operation the code is sent from your own Google account. A built in failsafe covers the rare case of a very quiet form: if the code has not gone out shortly, it is dispatched instead through FormFlow so that no respondent is left waiting. The respondent's email address is used only to send that code and, if you have enabled one response per verified email, to check whether that address has already submitted.
The respondent's email address is written into your own form only if you have mapped an email question. It is not retained by FormFlow beyond what is needed to deliver the code and enforce the one response per email check.
6. Booking and calendar invites
When you switch on the booking calendar, the respondent's chosen date, time and time zone are written into your own Google Form as their answer. If you enable the confirmation email, it is sent from your own account and may carry a calendar attachment written in UTC with a 30 minute reminder alarm.
Slot availability is held as a count only. It carries no respondent name, email or identifier.
7. Third party services
Google Translate, via Google's built in translation service
When you enable respondent languages, the Add-on translates the form's visible labels, meaning question titles, options and interface text, using Google's translation service inside the Google Apps Script platform. Only label text is translated. Respondent answers and respondent identities are never sent for translation, and answers are always stored in the form's original language.
The FormFlow respondent service
Respondents answer on a page served by FormFlow. Because live features such as seat counting run on this page, a submission occasionally takes a short moment to appear in your form: it is being handed over, encrypted in transit, and removed from our service automatically once delivered. The service holds only your form page's display setup and uses it solely to run the page's features. It is never used for advertising, profiling or AI training.
No one else
Beyond Google's own platform services described above, we transfer Google user data to no other party. There are no advertising networks, no analytics vendors and no AI providers in the path of your form data.
8. Respondents' privacy
Respondents interact with a web page served by the Add-on in order to submit their response into the form owner's Google Form. They install nothing, they do not sign in to the Add-on, and no respondent account is created. Respondent answers pass directly into the form owner's Google account and are subject to the form owner's own privacy practices. Live availability shown on the page is derived from aggregate counts only.
Where the exam focus guard is enabled, the page counts tab switches during the attempt and writes that count into the response. It records no screen content, no keystrokes, no camera and no microphone data.
9. Security and data protection
- All communication between the Add-on, the FormFlow respondent service and your Google Form uses HTTPS with TLS encryption in transit.
- The Add-on requests the minimum OAuth scopes its features require, including the current form only Forms scope, so it can never reach another file in your Google account.
- We store no passwords, no OAuth tokens and no Google credentials. Authentication is handled entirely by Google's own session storage inside the Google Apps Script platform.
- Each form is registered with the FormFlow service under its own key and secret, minted at registration, so one form's setup cannot be read using another form's credentials.
- Configuration and licence data held inside your Google account is scoped per form and per user, so no installer of the Add-on can read another installer's settings.
- Access to our licensing server is limited to authorised Dynamic Minds Group personnel, is used only to run licences and answer support requests, and is never used to read form content or responses.
- You can withdraw every permission at any time at myaccount.google.com/permissions.
10. Data retention and deletion
We keep the least we can, for the shortest time we can. This table states every retention period that applies.
| What | How long we keep it | How it is deleted |
|---|---|---|
| Respondent answers | Held only momentarily while the submission is handed into your own Google Form. We keep no database of responses | Automatic on delivery. No action needed |
| Email verification codes | A few minutes, until the code expires or is used | Automatic on expiry |
| Your form's display setup, and its seat and slot counters | For as long as your respondent link is in use | Removed when you uninstall the Add-on, or on request to unregister the form |
| Feature configuration inside your Google account | For as long as the form exists | Deleted with the form, or when you uninstall the Add-on |
| Licensing record: your name and email, plan, form count and response count | For the life of your licence, then up to 24 months for billing, tax and support history | Write to privacy@dynamicmindsgroup.com and we delete it within 30 days, except any billing record we are required by law to retain |
| Error and diagnostic logs | Up to 90 days | Automatic rolling deletion |
Uninstalling the Add-on from your Google account stops all processing immediately.
11. Your rights and choices
- Access. Your form, your questions and every response live in your own Google account and are always yours to view, edit or export.
- Deletion. Uninstall the Add-on to stop all processing. To delete your name and email from our licensing records, write to privacy@dynamicmindsgroup.com and we will action it within 30 days.
- Revoke access. Withdraw the Add-on's permissions at any time at myaccount.google.com/permissions.
- Correction and objection. Write to privacy@dynamicmindsgroup.com and we will respond within 30 days.
- Complaint. If you believe we have mishandled your data, write to us first. You also retain the right to complain to the data protection authority in your own country.
12. Children and students
FormFlow Pro is a tool for form owners, meaning teachers, organisers and professionals. It is not directed at children, and children do not install or sign in to it. Where a form owner collects responses from students or minors, that data is processed under the form owner's authority and, where applicable, under their institution's existing Google Workspace for Education terms. Form owners are responsible for obtaining any consent their organisation or jurisdiction requires before collecting responses from minors.
13. Changes to this policy
We may update this policy from time to time, for example when we add a feature or clarify wording. The last updated date at the top of this page reflects the most recent revision, and we encourage you to check it occasionally. Where a change materially affects how we handle Google user data, we will announce it in the Google Workspace Marketplace listing update notes before it takes effect. Continued use of the Add-on after a change takes effect constitutes acceptance.
14. Contact
Dynamic Minds Group, New Delhi, India
Privacy: privacy@dynamicmindsgroup.com
Support: dmg@dynamicmindsgroup.com
Website: dynamicmindsgroup.com
FormFlow Pro is a module of TeachOS by Dynamic Minds Group. Google Forms™ is a trademark of Google LLC. FormFlow Pro is not affiliated with or endorsed by Google.