Acceptable Use Policy

Formcrest is a form backend that receives, stores, and forwards the data your website visitors submit. Because that infrastructure can be abused, this Acceptable Use Policy defines the conduct that is not permitted on the service. It applies to every account, form, and submission, and forms part of our Terms of Service. By using Formcrest you agree to follow it.

Prohibited uses

You may not create, host, or operate forms that are used for any of the following. These activities can lead to suspension or permanent termination of your account.

• Phishing and impersonation forms — forms that imitate banks, payment providers, employers, government agencies, or any other organisation in order to deceive the people who submit them.
• Credential harvesting — forms designed to collect passwords, login credentials, one-time codes, or other authentication secrets.
• Child sexual abuse material (CSAM) — strictly forbidden. We report any such material to the relevant authorities and preserve evidence as required by law.
• Collecting sensitive financial, identity, or health data — forms that gather payment card numbers, CVVs, PINs, government-issued identification numbers, or healthcare data. Formcrest is not a payment processor and is not built to handle this category of data.
• Fraud schemes — forms used in romance, lottery, prize, or advance-fee fraud, or any other scheme intended to deceive people into sending money or personal information.
• Spam relay and inbox bombing — using a form to deliver messages to a destination address that is not the form owner's own, effectively turning the form into a relay to flood or harass a third party's inbox.
• Illegal content — any content or activity that is illegal under European Union law or the laws of Greece, the founder's country of residence.
• White-label reselling — reselling, rebranding, or repackaging Formcrest as your own form backend service.
• Automated bulk account creation — programmatically registering accounts at scale. The intended model is one human, one account.

Enforcement

We may suspend or terminate any account, or disable any individual form, that violates this policy. When a form is suspended, it returns an inactive error to incoming submissions, and the dashboard shows a banner explaining the reason and how to appeal. While an account is suspended, outbound activity is paused: notification emails, webhooks, and third-party integrations stop delivering.

We do not refund accounts that are terminated for violating this policy, and an active subscription continues to bill during a suspension.

Response targets

We triage reports by severity. Our target times from confirming a credible report to suspending the offending account are:

These are targets, not guarantees, and we may act faster where the harm is severe or ongoing.

How to report a violation

If you believe a form or account on Formcrest is being used in breach of this policy, please tell us. The fastest route is our report abuse form. You can also email us at info@formcrest.com. Include the form URL or endpoint and any details that help us investigate.

Appeals

If your account has been suspended and you believe the decision was made in error, you can appeal. Email info@formcrest.com with your account ID and an explanation. We review appeals and either reinstate or uphold the decision within 5 business days, and we document the outcome.

Related policies

This policy works alongside our Terms of Service, Privacy Policy, our Digital Services Act notice, and our Transparency Report.