Privacy Policy

1. Who we are

FormMate 80 ("we", "us", "our") is an independent web service that helps visa applicants fill out the Australian Government's Form 80 Personal Character Assessment. We are not affiliated with the Australian Government or the Department of Home Affairs.

For privacy enquiries, contact us at formmate80.com.au/contact.

2. Information we collect

When you use FormMate 80, we may collect:

• Account information: your name and email address when you register.
• Form answers: the information you enter while completing your Form 80 (personal details, travel history, employment history, family details, and character disclosures). This data is stored against your account so you can save progress and return later.
• Authentication data: a hashed (one-way encrypted) version of your password, or a Google account identifier if you sign in with Google.
• Usage data: standard web server logs including IP address, browser type, pages visited, and timestamps. We do not use analytics tracking services beyond standard server logs.

We do not collect payment information. FormMate 80 is free to use.

3. How we use your information

• To provide the service: save your form progress and generate your completed PDF.
• To authenticate you and keep your account secure.
• To respond to support requests submitted via the contact form.
• To send transactional emails (password reset links). We do not send marketing emails.

We do not sell, rent, or share your personal information with third parties for marketing purposes.

4. How we store your data

Your data is stored in a PostgreSQL database hosted on Render (infrastructure located in the United States). Passwords are hashed using bcrypt and are never stored in plaintext. Form answers are stored encrypted at rest by the database provider.

We retain your account data for as long as your account exists. You can request deletion at any time by contacting us.

5. Third-party services

• Resend — used to send transactional emails (password resets). Resend receives your email address when a reset is requested.
• Google OAuth — if you choose to sign in with Google, Google shares your name and email address with us. We do not receive your Google password. Google's privacy policy applies to that interaction.
• Google Fonts — fonts are loaded from Google's CDN. Google may log your IP address as part of this request.

6. Cookies and session data

We use a single session cookie to keep you logged in. This cookie is strictly necessary for the service to function. It is not used for advertising or cross-site tracking. The cookie is set with HttpOnly and SameSite=Lax flags.

We do not use advertising cookies, tracking pixels, or analytics platforms that set third-party cookies.

7. Your rights

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your account and all associated data.
• Export your form answers (available via the app dashboard).

To exercise these rights, contact us. We will respond within 30 days.

8. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "last updated" date at the top of this page. Continued use of FormMate 80 after changes constitutes acceptance of the updated policy.

9. Contact

For any privacy-related questions or requests, please use our contact form.