1. Introduction
This Privacy Policy explains how MOBIRISE ("Mobirise", "we", "us", or "our") collects, uses, stores, and protects personal information in connection with our websites, applications, and related services, including Mobirise and Formoid (used for Mobirise Forms) (collectively, the "Services").
By using the Services, you acknowledge the practices described in this Privacy Policy.
2. Information we collect
2.1 Information you provide to us directly
- account and contact information (such as name, email address, company name, and account details);
- account credentials and profile information;
- communications and support requests you send us;
- marketing preferences and newsletter subscription information;
- content you submit through the Services (for example, content used to build websites with Mobirise, and prompts you submit to our AI-powered features).
2.2 Information we receive from third parties
We receive limited information about you from third parties we work with, including:
- Payment processor (Verifone Payments B.V., operating as 2Checkout): We do not collect financial information from you (such as your payment card number, expiration date, or security code). All payments to us are handled by Verifone Payments B.V., operating as 2Checkout — see their privacy policy at https://www.2checkout.com/legal/privacy/. After your purchase, we receive limited order confirmation data from 2Checkout (order ID, date of purchase, your email address, and company name where provided) to fulfil your purchase, link your license to your account, provide support, and maintain business records. Receipts and invoices are issued directly by 2Checkout.
- Authentication providers (e.g., Google, Meta): if you sign in using a third-party login (where supported), we receive a limited identifier from that provider to authenticate your account.
2.3 Information we collect automatically
When you use the Services, we collect technical and usage information, such as:
- IP address, browser type, device information, operating system, and language settings;
- session and login activity, such as login timestamps, the IP address used at login, last-seen information, and account activity logs;
- referring URLs, pages visited, actions performed within the Services, and timestamps;
- diagnostic and performance data, including error logs and crash reports.
2.4 Customer form submissions (Formoid / Mobirise Forms)
When you use Formoid (Mobirise Forms) to collect submissions through forms on your own websites, we process those submissions on your behalf. In that context, you are the controller of the submissions and Mobirise is your processor. Section 7 explains this in more detail.
3. How and why we use information
We use personal information to:
- provide, operate, maintain, and improve the Services, including account management, customer support, and form submission processing for Formoid (Mobirise Forms) customers (see Section 7);
- monitor performance and security of the Services;
- send service-related notices and technical communications;
- send newsletters and marketing communications (see Section 5);
- detect, prevent, and address fraud, abuse, or violations of our terms;
- showcase the capabilities of our AI-powered features, which may include publicly displaying examples of AI-generated content;
- comply with applicable laws and respond to lawful requests from authorities.
Where required by data protection laws, we process personal information on the basis of performance of a contract, your consent, our legitimate interests in operating and securing the Services, or compliance with a legal obligation.
4. Cookies and analytics
We use cookies and similar technologies to operate the Services, remember your preferences, and understand how visitors use our websites.
We use Google Analytics to collect information about how visitors interact with our websites. Google Analytics may collect your IP address, device information, browser type, and interactions with pages and features. We do not use Google Analytics to identify individual visitors or to process customer form submission content.
You can control cookies through your browser settings.
For more information about how Google processes data, please visit: https://policies.google.com/privacy.
5. Marketing communications
We may send you newsletters or promotional messages about Mobirise products and features. You can unsubscribe at any time using the link in any marketing email or by contacting us at support@mobirise.com.
Where required by law, we will only send you marketing communications with your consent.
6. Sharing of information
We share personal information only with the categories of recipients listed below, and only as necessary for the purposes described in this Privacy Policy.
- Cloud and infrastructure providers — including hosting, storage, content delivery, security, and transactional delivery providers, who process Personal Data on our behalf as our sub-processors. Our current sub-processor list is available at subprocessors.html.
- Analytics providers (e.g., Google) — to help us understand how visitors use our websites.
- Email marketing providers (e.g., Mailchimp) — to deliver newsletters and marketing communications to subscribers.
- AI service providers — only in connection with optional AI-powered features, and only for prompts, content, or other data submitted by users through those features.
- Professional advisors (such as lawyers, accountants, and auditors) — where reasonably necessary for the operation of our business.
- Legal or regulatory authorities — where required by law, court order, or to protect our rights, property, or safety, or that of our users.
We do not sell or share personal information for cross-context behavioural advertising (as those terms are defined under the California Consumer Privacy Act).
7. Customer websites and form submissions
When customers build and host websites using Mobirise, or use Formoid to collect form submissions, Mobirise processes the resulting content on the customer's behalf — including any personal data the customer chooses to publish on their website (such as contact pages, team profiles, or testimonials) and any personal data submitted by visitors through forms.
In that context:
- the customer is the controller of the published content and form submissions;
- Mobirise acts as a processor in accordance with applicable data protection laws and our Data Processing Addendum (available at dpa.html);
- requests to access, correct, or delete data on a customer's website or form should be directed to the customer, not to Mobirise.
We remove hosted websites at the customer's request, when the customer's account or subscription ends, where required by applicable law, or where the content violates our Terms of Service.
8. International data transfers
Mobirise is based in the United Kingdom. Personal Data we process may be transferred to and processed in countries outside your jurisdiction, including the United States and other countries where our sub-processors operate. These countries may have data protection laws that differ from those in your country.
Where Personal Data is transferred from the European Economic Area, United Kingdom, or Switzerland to a country that has not been determined to provide an adequate level of protection, we rely on appropriate safeguards, including:
- the European Commission's Standard Contractual Clauses (SCCs) under Implementing Decision (EU) 2021/914;
- the UK International Data Transfer Addendum issued by the UK Information Commissioner;
- the EU-US Data Privacy Framework, the UK Extension to the DPF, and the Swiss-US DPF, where the receiving party is certified under those frameworks.
Our Data Processing Addendum sets out additional information about international transfers in the context of customer data. You can request a copy of the relevant transfer safeguards by contacting us at support@mobirise.com.
9. Data retention
We retain personal information only for as long as necessary to fulfil the purposes described in this Privacy Policy, taking into account the nature of the data, the purpose of processing, and applicable legal obligations (for example, tax and accounting record-keeping under UK law). When we no longer need personal information for these purposes, we delete it or anonymise it.
You can request deletion of your data at any time by contacting us, subject to retention requirements imposed by law.
10. Security
We implement appropriate technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration, or disclosure. These measures include encryption of data in transit (HTTPS/TLS), restricted access to systems containing personal information, hosting on cloud infrastructure providers with recognised security certifications, regular backups, and documented incident response procedures.
11. Your rights
Depending on your location and applicable law, you may have rights to access, rectify, delete, restrict, object to the processing of, or transfer your personal information; to withdraw consent where processing is based on consent; and to lodge a complaint with a data protection supervisory authority.
To exercise these rights, contact us at support@mobirise.com. We may need to verify your identity before responding.
12. California residents
If you are a California resident, you have rights under the California Consumer Privacy Act ("CCPA"), including rights to know, access, correct, and delete personal information we hold about you; the right to opt out of the sale or sharing of personal information; the right to limit the use of sensitive personal information; and the right not to be discriminated against for exercising your rights.
Mobirise does not sell or share personal information, and does not use sensitive personal information in ways that would trigger your right to limit such use.
To exercise your CCPA rights, contact us at support@mobirise.com.
13. Children's privacy
The Services are not directed to children under the age of 16, in line with our Terms of Service. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us at support@mobirise.com and we will take appropriate steps to delete it.
14. Third-party services and links
The Services may integrate with or link to third-party services and websites that we do not control. This Privacy Policy does not apply to those third-party services, and we are not responsible for their privacy practices.
The Services use the YouTube API to search and display YouTube videos. By engaging with YouTube content through the Services, you agree to be bound by the YouTube Terms of Service and the Google Privacy Policy.
The Services use the Unsplash and Pixabay APIs to search for and display images in the Free Image Library. When you use this feature, your search queries and technical data such as your IP address may be processed by these providers in accordance with their privacy policies.
We encourage you to review the privacy policies of any third-party services you choose to use.
15. Changes to this Privacy Policy
We may update this Privacy Policy from time to time by publishing a new version on our websites. We encourage you to check back periodically to review this Privacy Policy for any changes since your last visit.
Where the change is material, we will post a prominent notice on our website before the change takes effect.
16. Contact us
If you have questions, requests, or concerns regarding this Privacy Policy or our data practices, please contact us at support@mobirise.com.
MOBIRISE, EU registered address: Flight Forum 40, 5657 DB Eindhoven, Netherlands.
