Privacy notice
Updated 29 September 2026
What information GazeForm handles and how to contact us about it.
Who handles your information
Excelin Web Limited operates GazeForm. For account, service, or privacy questions, contact support@excelin.xyz. If you submit a form, order request, or event registration to a GazeForm customer, that business decides what to collect and how to use it. Contact that business first about its records or marketing; we can help identify the appropriate route.
Information processed
The portal processes account and organisation details, form submissions, configured fields and uploads, newsletter contact details and consent records, event registrations, catalog orders, billing references, and support requests. Security and operational records may include IP addresses, browser or request information, timestamps, and audit activity. Stripe handles payment entry and processing; the portal stores billing identifiers and payment status rather than asking you to enter card data into a form.
How information is used
Information is used to authenticate users, operate workspaces, deliver form submissions and emails, manage subscriptions and add-ons, prevent abuse, provide support, and maintain service records. Newsletter enrolment requires explicit marketing opt-in or recorded consent for manually added or imported contacts. Submitting a contact form is not by itself newsletter consent. Unsubscribe and suppression records help prevent further unwanted sends.
Service providers and destinations
GazeForm uses Cloudflare for hosting and protection, Supabase for account and database services, Resend for email, Stripe for billing, and OpenAI for AI features. Selected submission content is sent for AI processing when those features are used; the current AI request configuration disables response storage. This does not remove processing by the provider or imply that every provider record is immediately deleted. Customer-configured email, webhook, and Slack destinations also receive the information needed for those actions. Providers may process information outside New Zealand; contact us for questions about the arrangements relevant to your workspace.
Retention and protection
Access controls, workspace separation, spam protection, and audit records help protect information. No service can promise absolute security. Retention depends on the record, workspace settings, operational needs, and legal obligations; there is no single retention period for every type of data. Contact support@excelin.xyz about access, export, correction, or deletion requests. Billing, security, consent, suppression, or backup records may need to be retained for a different period from active form records.
Your choices and rights
You may request access to or correction of your personal information. We may need to verify your identity and, for customer-controlled records, coordinate with the relevant business. Use newsletter unsubscribe links to stop that organisation's marketing. Essential service, billing, and security messages are separate. Contact support@excelin.xyz with a privacy complaint; you can also contact the New Zealand Office of the Privacy Commissioner. Read our cookies and browser storage notice for information about your browser.