Privacy Policy
Privacy Policy
Last updated: 15 September 2026
1. Who we are
TwinaForms is a product of Harmony-IT, a business registered in Israel (licensed dealer no. 032028763).
For any privacy question, or to exercise a right described in this policy, contact supportat@twinaforms.com. We will provide our full registered business details on request, and in any contract we enter into.
2. Two different roles — please read this first
TwinaForms handles personal data in two very different capacities, and your rights depend on which one applies to you.
Where we decide — our own data. For visitors to this website and for the administrators of organisations that subscribe to TwinaForms, we determine what is collected and why. For that data, Harmony-IT is the controller (in Israeli terms, the database owner).
Where our customer decides — form data. When an organisation publishes a form built with TwinaForms and you fill it in, that organisation decides what is asked, why, and what happens to the answers. Harmony-IT only processes that data on their instruction, as a processor. We do not decide what their forms collect, and we do not use their form data for our own purposes.
If you completed a form and want your data corrected or deleted, contact the organisation whose form you filled in. They control it. We will assist them, but we cannot act on their data without their instruction.
3. What we process
Website visitors
We collect aggregate, privacy-preserving usage statistics for this website (see “Analytics and cookies” below). If you contact us, we process the details you send us so that we can reply.
Customer accounts
When an organisation connects TwinaForms to its Salesforce environment, we process: the Salesforce organisation identifier, the administrator’s name and email address, the organisation name, subscription and plan details, connection status, and support correspondence.
Form data
When a published form is used, our service processes the information that form is configured to collect and to write into our customer’s Salesforce environment, together with operational records of the submission — a reference, the form, a timestamp, and whether it succeeded or failed.
Our customer defines the content of their forms. We do not require, inspect or select the categories of personal data they choose to collect.
4. What we use it for
- To provide, operate and secure the service
- To perform the form operations our customer has configured — reading from and writing to their own systems
- To provide support and investigate faults
- To apply plan limits and manage billing
- To meet legal and regulatory obligations
We do not sell personal data. We do not use customer form data for advertising or marketing. We do not use customer form data to train artificial-intelligence models, and customer form data is not sent to any third-party AI service.
5. Who we share it with
We use a small number of service providers. We do not share personal data with anyone else except where required by law.
| Provider | Purpose |
|---|---|
| Amazon Web Services | Hosting, processing and operational logging for the TwinaForms service |
| Salesforce | Our customer’s own platform, under our customer’s own agreement with Salesforce |
| Cloudflare | Usage analytics for this website only — not for form data |
Where we act as a processor for a customer, we will notify that customer of any material change to this list.
6. Where data is stored
The TwinaForms service runs on Amazon Web Services in the eu-north-1 region (Stockholm, Sweden), within the European Economic Area. Harmony-IT is established in Israel, which the European Commission recognises as providing an adequate level of data protection.
Data held in a customer’s Salesforce environment stays wherever that customer’s own agreement with Salesforce places it. We do not move it.
7. How long we keep it
| Data | Retention |
|---|---|
| Data written into a customer’s Salesforce environment | Controlled entirely by that customer |
| Operational submission logs | By plan — Trial 30 days, Starter 90 days, Pro 365 days |
| Files staged temporarily for processing | Deleted after processing; unclaimed files expire within one day |
| Customer account records | For the life of the subscription, then deleted or returned on request, subject to legal obligations |
| Support correspondence | As long as needed to support the customer relationship |
8. Security
All network traffic is protected with HTTPS/TLS, and data is encrypted at rest. Credentials are held in a managed secrets service and are never exposed in published form pages. Access to production systems is limited to a small number of named people under least-privilege controls, and every request to our service is checked against the organisation it claims to belong to.
What a published form is permitted to read or write is decided by rules stored and enforced on our servers, not by the page in the browser. A published page carries no credentials and cannot be edited to reach data its author did not authorise.
Where detailed submission logging is switched on, the submitted content is encrypted under a key whose private half is held inside the customer’s own Salesforce environment. Harmony-IT holds only the public half and therefore cannot read that content.
A customer can revoke our access to their Salesforce environment at any time, from within Salesforce, without needing us to act.
9. Your rights
Subject to applicable law — including the Israeli Protection of Privacy Law and, where it applies, the GDPR — you may ask to review the personal data we hold about you, to have it corrected, to have it deleted, and in some cases to restrict or object to its processing or to receive a copy.
To exercise a right over data we control, contact supportat@twinaforms.com. We will respond within the period required by applicable law.
If your request concerns data submitted through a form published by one of our customers, please contact that organisation directly — see section 2. If you contact us instead, we will tell you so and, where we can identify them, help you reach them.
10. Analytics and cookies
This website uses Cloudflare Web Analytics, which measures aggregate traffic without using cookies for tracking and without building a profile of you across sites. We do not use advertising or cross-site tracking cookies on this website.
Published forms may use limited browser storage where a form’s configuration requires it — for example, to keep a verified session active for the duration of a working day. This is functional, not analytical.
11. Children
TwinaForms is sold to organisations and is not directed at children. Where a customer chooses to collect data from minors through their own forms, that customer is responsible for the lawful basis and any consent required.
12. Changes to this policy
We may update this policy as the service or the law changes. The date at the top shows when it was last revised. Where a change materially affects our customers, we will notify them directly.
13. Contact
Privacy enquiries: supportat@twinaforms.com
General enquiries: supportat@twinaforms.com
Harmony-IT, Israel — licensed dealer no. 032028763. Full registered details available on request.