Privacy Policy
Last updated: July 2026
Contents
Introduction
Varda Forms is operated by Varda Forms Inc. ("Varda Forms," "we," "our," or "us"), a company based in Manitoba, Canada. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our mobile and desktop applications, use our services, or interact with us in any way.
By using Varda Forms, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this privacy policy, please do not access or use our services.
Information We Collect
Information You Provide to Us
We collect information that you voluntarily provide when you:
- Register for an account or purchase a subscription
- Fill out a contact form or request a demo
- Subscribe to our newsletter or marketing communications
- Contact our customer support team
- Participate in surveys or promotions
This information may include:
- Name and job title
- Email address and phone number
- Company or organization name
- Billing address and payment information
- Any other information you choose to provide
Information Collected Automatically
When you visit our website, we may automatically collect certain information, including:
- IP address and browser type
- Device information and operating system
- Pages visited and time spent on our website
- Referring website or source
- General geographic location (city/country level)
Information from Your Use of the Platform
If you use Varda Forms as a cloud-hosted customer (where applicable), we may collect usage data to improve our services. However, Varda Forms is primarily a self-hosted solution — see the "Self-Hosted Deployment" section below for details on how this affects data collection.
How We Use Your Information
We use the information we collect for the following purposes:
- Provide and maintain our services — To deliver the products and services you request, process transactions, and manage your account
- Communicate with you — To respond to inquiries, send service-related notices, and provide customer support
- Improve our services — To analyze usage patterns, troubleshoot issues, and enhance the functionality of our platform
- Marketing and promotions — To send promotional communications (with your consent) about new features, products, or services
- Legal compliance — To comply with applicable laws, regulations, and legal processes
- Protect our rights — To detect, prevent, and address fraud, security issues, and technical problems
Data Storage & Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit using TLS/SSL
- Secure password hashing using industry-standard algorithms
- Regular security assessments and updates
- Access controls limiting data access to authorized personnel
- Regular backups and disaster recovery procedures
While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
Self-Hosted Deployment
Varda Forms is designed as a self-hosted solution. This means that when you deploy Varda Forms on your own infrastructure:
- Your data stays with you. All form submissions, user data, documents, and operational information are stored on servers you own and control.
- We do not have access to your data. We cannot see, access, or retrieve any information stored in your self-hosted deployment unless you explicitly grant us access for support purposes.
- You are the data controller. You are responsible for the privacy and security of data collected through your Varda Forms installation, in accordance with your own privacy policies and applicable laws.
- We only receive limited information. We may collect anonymous usage statistics (such as software version and feature usage) to improve our products, but this does not include any of your operational data or personally identifiable information from your users.
This self-hosted model is a key differentiator of Varda Forms and is designed to give you complete control over your data.
Mobile & Desktop Apps
Our iOS, Android, and desktop applications are clients for a Varda Forms server that you or your organization operates. The app connects only to the server address you enter during setup; it does not send your operational data to Varda Forms Inc.
- Server address — The server URL you configure is stored locally on your device so the app can reconnect. It is not transmitted to us.
- Sign-in credentials — Your authentication token is stored in the device's secure storage (the iOS Keychain or Android Keystore) and is used only to authenticate to your organization's server.
- No advertising or tracking SDKs. The apps contain no third-party advertising, analytics, or tracking software, and do not use device advertising identifiers. We do not build user profiles or sell data.
- Permissions. The apps request device permissions (such as camera, photos, or location) only when you use a feature that needs them — for example, attaching a photo to a report or tagging a request location. Data captured this way is sent only to your organization's server.
Third-Party Services
We may share your information with third-party service providers who perform services on our behalf, such as:
- Payment processors for handling transactions
- Email service providers for sending communications
- Analytics providers for understanding website usage
- Customer support tools for managing inquiries
These third parties are contractually obligated to protect your information and use it only for the purposes we specify. We do not sell your personal information to third parties.
Your Rights
Depending on your location, you may have certain rights regarding your personal information:
- Access — You can request a copy of the personal information we hold about you
- Correction — You can request that we correct inaccurate or incomplete information
- Deletion — You can request that we delete your personal information, subject to legal requirements
- Portability — You can request a copy of your data in a machine-readable format
- Opt-out — You can opt out of marketing communications at any time
- Withdraw consent — Where we rely on consent, you can withdraw it at any time
To exercise any of these rights, please contact us at [email protected].
Canadian Privacy Rights
If you are a Canadian resident, you have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws. We are committed to complying with these requirements.
California Privacy Rights
If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and the right to request deletion.
Deleting Your Account
You can delete your Varda Forms account and personal data directly in the app at any time:
- Open Settings → Account and choose Delete my account, then confirm with your password.
- Deleting your account anonymizes your personal information (your name and email are removed and replaced with an anonymized placeholder) and permanently disables your ability to sign in.
- Because Varda Forms is a system of record for safety, operations, and governance, records you created (such as form submissions, work orders, and audit history) are retained by your organization for legal and record-keeping purposes, but are no longer linked to your identity.
For self-hosted deployments, your organization is the data controller and administers retention of the underlying records. If you need help, contact your organization's Varda Forms administrator, or reach us at [email protected].
Children's Privacy
Varda Forms is not intended for use by children under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.
Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us:
- Email: [email protected]
- General inquiries: [email protected]
We will respond to your inquiry within a reasonable timeframe.