Terms of Service

1. Acceptance of Terms

By creating an account or using the Schweizerform platform (the "Service"), you agree to be bound by these Terms of Service (the "Terms"). If you do not agree to these Terms, do not use the Service. These Terms constitute a legally binding agreement between you and Schweizerform.

We reserve the right to modify these Terms at any time. We will notify you of material changes by updating the "Last Updated" date and, where appropriate, through service notifications. Your continued use of the Service after changes constitutes acceptance of the modified Terms.

Our Data Processing Agreement, published on this website, forms an integral part of these Terms. It is accepted automatically when you create an account and governs the personal data you collect through your forms.

The Service is offered exclusively to businesses, self-employed professionals, public bodies and associations acting in a professional or commercial capacity. It is not offered to consumers, and by creating an account you confirm that you are not acting as a consumer. Mandatory statutory provisions remain reserved.

2. Service Description

Schweizerform is a Swiss-made, end-to-end encrypted form building platform. The Service allows you to create forms, collect encrypted responses, and manage submissions. All form response data is encrypted in the respondent's browser before transmission using a zero-knowledge architecture — meaning Schweizerform cannot access or decrypt your response data.

The Service includes, but may not be limited to: form creation and management, encrypted submission collection, encrypted file uploads, form profiles, scheduling, form unlock codes, AI-assisted form creation and translation, team workspaces with role-based access, and subscription management.

AI-assisted features (form creation and translation) generate drafts to assist you; you remain responsible for reviewing their output before publishing. These features process only the prompt you provide or your form's own text — never respondent submissions — and run on Infomaniak's AI Services in Switzerland.

3. Account Registration

To use the Service, you must create an account by providing a valid email address and setting a password. You are responsible for maintaining the confidentiality of your account credentials and for all activities that occur under your account. You must notify us immediately of any unauthorised use of your account.

You represent and warrant that the information you provide during registration is accurate and complete, and that you will keep this information up to date.

Account holders may occasionally receive emails from us about new features and platform announcements. Every such email contains an unsubscribe link and you may opt out at any time; emails necessary to operate your account and keep it secure are not affected. See our Privacy Policy for details.

4. Vault Key Responsibility

When you set up your account, you create a personal vault key. This vault key is used to derive your master encryption key, which protects all your form data. Due to our zero-knowledge architecture:

• •We do not store your vault key — it is processed exclusively in your browser and is never transmitted to our servers.
• •We cannot recover your vault key or recovery code — neither is transmitted to or stored by us, so we have no way to retrieve them. Your recovery code is your own backup for restoring access if you forget your vault key.
• •We cannot decrypt your data — without your vault key (or your recovery code), your encrypted form data cannot be decrypted by anyone, including us.
• •You are solely responsible for storing your vault key and recovery code securely (e.g., in a password manager or physical safe).

By using the Service, you acknowledge and accept that your vault key and recovery code are processed only in your browser and are never stored by us. If you forget your vault key, you can restore access using your recovery code. If you lose both your vault key and your recovery code, your encrypted data will become inaccessible; it is not deleted and can be recovered if you later regain either code, but Schweizerform cannot recover it for you and shall not be liable for any resulting loss of access.

5. Data Ownership & Stewardship

You retain full ownership of all data you create, collect, and store through the Service. Schweizerform acts as a data steward — we provide the encrypted storage infrastructure, but the content belongs entirely to you.

Due to our zero-knowledge architecture, we have no technical ability to access, read, modify, or analyse your encrypted content. We do not claim any intellectual property rights over your data.

You are responsible for ensuring that the data you collect through your forms complies with all applicable laws and regulations, including data protection laws. You are the data controller for any personal data collected via your forms; we are a data processor.

When you create a team workspace, you may invite others as members with defined roles (owner, admin, member, or viewer). The workspace owner is the data controller for all content in that workspace and is responsible for managing its membership and access. Members can access shared forms and submissions according to their role; removing a member ends their future access, though any data they downloaded beforehand is outside our control.

6. Subscriptions & Payments

The Service offers a free plan and paid subscription plans. Paid plans provide additional forms, submissions, and features as described on our Pricing page.

• •Billing Cycles: Paid plans are available on monthly and annual billing cycles. Annual plans are billed upfront for the full year at a discounted rate.
• •Payment Processing: All payments are processed securely by Stripe Payments Europe, Ltd. (Ireland). Stripe may transfer payment data within its group to Stripe, LLC (USA), which is certified under the Swiss–U.S. Data Privacy Framework. We do not store your credit card information. Stripe's terms and privacy policy also apply to your payment.
• •Upgrades: Your upgrade takes effect immediately. You will be charged the prorated difference for the remainder of your current billing period.
• •Downgrades & Cancellations: Cancellations take effect at the end of your current billing period; you keep your plan's features until then. Downgrades on card or TWINT subscriptions take effect immediately, and the unused part of the higher plan is credited to your next invoice.
• •Data Preservation: Your existing forms and encrypted submissions are never deleted when you downgrade or cancel. If you exceed the limits of a lower-tier plan, you will not be able to create new forms or accept new submissions until you are within the plan's limits.
• •Price Changes: We may change our prices. A change applies to new subscriptions from the date it takes effect. An existing subscription keeps the price it was taken out at, including at every renewal, for as long as it remains active. Changing your plan or your billing period, or subscribing again after cancelling, starts a new subscription at the prices then current; the app shows you the amount before you confirm. Statutory taxes, duties and levies are not covered by this guarantee: if value added tax or a comparable charge becomes applicable to your subscription, or its rate changes, we may add it to existing subscriptions from the date it takes effect.

7. Acceptable Use

You agree to use the Service only for lawful purposes and in compliance with all applicable laws and regulations. You may not use the Service to:

• •Collect data for illegal purposes or activities
• •Distribute malware, phishing content, or spam
• •Attempt to access, interfere with, or disrupt the Service's infrastructure or other users' accounts
• •Violate the intellectual property rights of third parties
• •Collect personal data from respondents without a lawful basis or appropriate consent
• •Circumvent or attempt to circumvent any security measures, rate limits, or usage restrictions

We reserve the right to suspend or terminate accounts that violate these terms or are used for activities we reasonably determine to be harmful, illegal, or abusive.

You alone decide whether the Service is suitable for the data you intend to collect, and you carry out any data protection impact assessment your processing requires. The Service is a general-purpose form tool. It is not designed for safety-critical, emergency or real-time use, and must not be used as a channel for reporting medical emergencies or any other situation requiring an immediate response.

8. Limitation of Liability & Indemnity

The Service is provided "as is" and "as available" without warranties of any kind, either express or implied, including but not limited to warranties of merchantability, fitness for a particular purpose, or non-infringement.

To the maximum extent permitted by Swiss law, Schweizerform shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including but not limited to loss of data, loss of revenue, loss of profit, or loss of business, arising out of or in connection with these Terms or the Service, on any legal basis, whether in contract, tort or otherwise.

In particular, Schweizerform shall not be liable for any data loss resulting from: (a) loss of your vault key; (b) client-side encryption or decryption failures not caused by the Service; (c) misuse of your account credentials by third parties.

Our total liability for all claims arising out of or in connection with these Terms or the Service, on any legal basis, whether in contract, tort or otherwise, shall not exceed the greater of (a) the amount you paid to Schweizerform in the twelve (12) months preceding the damaging event and (b) CHF 1,000. This limit applies in the aggregate to all claims arising within any twelve-month period; multiple claims do not increase it.

These limitations also apply to claims arising under any data processing agreement concluded between you and Schweizerform, to the extent Swiss law permits their exclusion. They do not apply in cases of gross negligence or intent (Art. 100 para. 1 CO).

You will indemnify Schweizerform and hold it harmless against claims brought by third parties or by authorities, including the reasonable costs of legal defence, arising from the content, configuration or lawfulness of your forms, from the legal basis you rely on for collecting data through them, from the messages you instruct and the recipients you designate, or from your management of accounts, permissions and access. This does not apply to the extent that the claim is attributable to a breach of duty for which Schweizerform is responsible. We will inform you of any such claim without undue delay and will not settle it without your consent, which you will not unreasonably withhold.

9. Service Availability

We strive to maintain high availability of the Service but do not guarantee uninterrupted access. The Service may be temporarily unavailable due to maintenance, updates, or circumstances beyond our control. We will make reasonable efforts to notify you of planned maintenance in advance.

10. Account Termination

You may delete your account at any time from the Settings page. Deletion through this function takes effect immediately and irreversibly; please complete any exports you need beforehand, as we cannot restore your data afterwards. Upon account deletion:

• •All active subscriptions will be cancelled immediately
• •All personal data, forms, encrypted submissions, and associated files will be permanently deleted
• •This action is irreversible — deleted data cannot be recovered

We may terminate or suspend your account if you violate these Terms, engage in activities that are illegal or harmful, or if we reasonably believe that your account has been compromised.

11. Data Processing & Sub-processors

For personal data you collect through your forms, you act as the data controller and Schweizerform acts as your data processor within the meaning of Art. 9 nFADP and, where applicable, Art. 28 GDPR. Our Data Processing Agreement is published on this website, forms part of these Terms and is accepted when you create an account — no signature is required. For customers bound by professional secrecy — such as medical practices, law firms and counselling services — it contains a self-activating provision on Art. 321 of the Swiss Criminal Code. A countersigned, customer-specific version is available on request at support@schweizerform.ch.

We currently rely on three sub-processors: Infomaniak Network SA (Switzerland) for application servers, database, object storage, transactional email and the optional AI features; Stripe Payments Europe, Ltd. (Ireland) for payments and subscriptions; and Bjørnerås Labs — EuSend (Norway; processing in Germany and Finland) for the sending of transactional e-mails (one-time codes, account and invitation messages, and notifications about activity on your own forms).

The authoritative list — with the purpose, the place of processing and the relevant caveats for each provider — is section 11 of the Data Processing Agreement.

We will inform you at least 30 days in advance before engaging a new sub-processor or replacing an existing one. You may object on substantiated data protection grounds within 30 days; if no mutually acceptable solution is found, either party may terminate the affected subscription. Where a replacement is necessary to avert a danger to the security or availability of the Service, we may replace a sub-processor immediately and will inform you without delay thereafter.

AI-assisted features are disabled by default and process only text you have written yourself. Respondent submissions are never transmitted to any AI service.

12. Security Incidents

If we become aware of a security breach affecting your data, we will notify you in text form without undue delay and at the latest within 48 hours of becoming aware. The notification will describe the nature of the breach, the categories of data concerned and the measures taken, to the extent known at that time. Missing details will follow as soon as they become available.

You are responsible for keeping a current contact address on file for such notifications, and for informing us without delay if you suspect that your credentials have been compromised.

A notification under this section is made to comply with legal obligations and does not constitute an admission of fault or liability.

13. Service Discontinuation

If we decide to discontinue the Service in whole or in part, we will notify you at least 90 days in advance in text form.

During this notice period the Service remains available so that you can export your data. Because of our zero-knowledge architecture, only you can export your data in readable form — we are technically unable to do this for you. You are responsible for completing your export before the notice period ends.

We will refund the unused portion of any prepaid subscription fees on a pro-rata basis. After the notice period expires, all data will be permanently deleted in accordance with Section 10.

14. Governing Law & Jurisdiction

These Terms are governed by and construed in accordance with the laws of Switzerland, without regard to its conflict of law provisions. Any disputes arising under or in connection with these Terms shall be subject to the exclusive jurisdiction of the courts of Pfäffikon SZ, Switzerland.

15. Severability

If any provision of these Terms is found to be invalid or unenforceable by a court of competent jurisdiction, the remaining provisions shall remain in full force and effect. The invalid or unenforceable provision shall be modified to the minimum extent necessary to make it valid and enforceable.

16. Contact

If you have any questions about these Terms of Service, please contact us at: