Terms of Service

1. Who we are

Basilform (the "Service") is operated by Borislav Grigorov, based in Bulgaria ("we", "us"). Contact: [email protected].

2. Acceptance and eligibility

By creating an account or using the Service, you agree to these Terms and to our Privacy Policy. If you do not agree, do not use the Service.

You must be at least 16 years old to use Basilform.

3. What the Service does

Basilform lets you create form endpoints, embed them on your own websites, and receive the submissions. The Service includes file uploads, CAPTCHA protection, configurable plugins (such as auto-responder email and redirects), and a dashboard to view and manage submissions.

4. Accounts

• You are responsible for the accuracy of the information you provide.
• You must keep your password confidential and are responsible for activity under your account.
• Notify us at [email protected] of any unauthorized use.
• One account per natural person or legal entity; do not share credentials.

5. Acceptable use

You will not, and will not allow anyone else to:

• send spam, unsolicited bulk messages, or phishing content through forms or auto-responders;
• host content that is illegal, infringing, defamatory, harassing, or that promotes violence;
• distribute malware, run exploits, or attempt to break the Service's security;
• collect special-category personal data (health, biometrics, political opinions, etc.) without a valid lawful basis under GDPR Art. 9;
• collect personal data from form submitters without giving them a clear, lawful privacy notice;
• use the Service to scrape, mine, or aggregate data in violation of third-party rights;
• impersonate another person or organisation;
• circumvent rate limits, CAPTCHA, or any technical restriction.

6. Your content and licence

You retain ownership of the forms you build and the submissions you receive ("Your Content"). You grant Basilform a worldwide, non-exclusive, royalty-free licence to host, store, transmit, back up, and process Your Content solely to operate and improve the Service for you.

You represent and warrant that you have all rights, permissions, and lawful bases (including under the GDPR) required to collect and process the personal data that submitters send through your forms.

7. Data Processing Addendum

This section forms a Data Processing Addendum ("DPA") between you (as the data controller of submissions to your forms) and Basilform (as your data processor). Accepting these Terms means accepting this DPA. It applies whenever the GDPR applies to your processing.

7.1 Roles

For data submitted to your forms, you are the controller and Basilform is the processor. For account data about you, Basilform is the controller; see the Privacy Policy.

7.2 Subject matter, duration, nature and purpose

• Subject matter: hosting form submissions and related files on your behalf.
• Duration: for as long as your account is active, plus any short retention windows described in the Privacy Policy.
• Nature and purpose: receiving, storing, transmitting, and displaying back to you the data that your form submitters provide.

7.3 Categories of data subjects and personal data

• Data subjects: the people who submit your forms.
• Personal data: whatever your form collects (typically contact details and free-text messages), plus technical data (IP address and User-Agent) that we capture for anti-abuse and CAPTCHA verification.

7.4 Instructions

Basilform will process submission data only on your documented instructions, which are: (a) these Terms, (b) the configuration you set in your account (form fields, plugins, deletion actions), and (c) any written instructions you send to [email protected]. If we believe an instruction infringes data protection law, we will tell you.

7.5 Confidentiality

Anyone authorised to access submission data is bound by a duty of confidentiality.

7.6 Security

We maintain appropriate technical and organisational measures, including: HTTPS in transit, bcrypt password hashing, encryption at rest for files in Cloudflare R2, access control, rate limiting, CAPTCHA, and server-side logging. Measures evolve over time; the goal is a level of security appropriate to the risk (GDPR Art. 32).

7.7 Subprocessors

You give Basilform general authorisation to engage the subprocessors and billing service providers listed in the Privacy Policy, including Creem for billing-related personal data. We will give notice (on this page or by email) before adding or replacing a subprocessor. You may object on reasonable data-protection grounds; if we cannot accommodate the objection, you may terminate your account.

7.8 Assistance with data subject requests

We will provide reasonable technical assistance so you can respond to access, rectification, erasure, restriction, portability, and objection requests from your submitters. In practice this means giving you the tools to view, export, and delete submissions through the dashboard.

7.9 Personal data breach notification

We will notify you without undue delay after becoming aware of a personal data breach affecting your submissions, with the information needed for you to meet your GDPR Art. 33 obligations.

7.10 Return and deletion

On termination of your account, and at your choice, we will return or delete the submission data we hold for you, except where Union or Member State law requires us to keep it.

7.11 Audits

On reasonable written request, we will provide the information necessary to demonstrate compliance with this DPA. As a small operator we cannot accommodate on-site audits; we will instead respond to a reasonable written questionnaire.

7.12 International transfers

Where subprocessors are outside the EEA, transfers rely on the Standard Contractual Clauses with any supplementary measures required.

8. Free tier and paid plans

Basilform offers a free tier and paid upgrades. Paid plan prices, limits, billing interval, renewal terms, and applicable taxes are shown before checkout.

• Creem is Basilform's Merchant of Record and handles checkout, payment methods, subscription billing, invoices, receipts, tax calculation and remittance, and legally required payment records. Your purchase is also subject to Creem's Terms, Privacy Policy, and DPA.
• Subscriptions renew automatically until cancelled. You can cancel at any time; paid access continues until the end of the current billing period.
• Except where required by law, fees are non-refundable.
• We may change plan features, limits, or prices prospectively with notice. Price changes apply on renewal after notice.

If payment fails, Creem or Basilform may notify you and retry the charge. We may downgrade, suspend, or terminate paid features if a subscription remains unpaid.

9. Suspension and termination

We may suspend or terminate accounts that violate these Terms, abuse the Service, or put the Service or other users at risk. We will try to give notice first where reasonable. Serious violations (such as illegal content, malware, or coordinated abuse) may result in immediate termination.

You can close your account at any time by contacting [email protected].

10. "As is" and limitation of liability

To the maximum extent permitted by law, the Service is provided "AS IS" and "AS AVAILABLE", without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose, and non-infringement.

To the maximum extent permitted by law, Basilform's total aggregate liability arising out of or relating to the Service in any 12-month period will not exceed the greater of (a) the fees you paid through Creem for the Service in that period, or (b) EUR 50. We are not liable for indirect, incidental, special, consequential, or punitive damages, or for lost profits, revenue, data, or goodwill.

Nothing in these Terms limits liability that cannot be limited under applicable law, including liability for fraud, gross negligence, or wilful misconduct, and including statutory consumer rights.

11. Indemnity

You agree to indemnify and hold Basilform harmless from claims arising out of your unlawful use of the Service, content you host, or personal data you process in breach of these Terms or applicable law.

12. Changes

We may update these Terms. We will post the new version with a new "Last updated" date and, for material changes, notify account holders by email. Continued use after the effective date means you accept the new Terms.

13. Governing law and venue

These Terms are governed by the laws of Bulgaria, without regard to its conflict-of-laws rules. Any dispute will be submitted to the courts of Sofia, Bulgaria. Consumers retain the protection of the mandatory provisions of the law of their country of habitual residence.

14. Contact

Borislav Grigorov
Bulgaria
[email protected]