COPPA Compliance
Last Updated: January 26, 2026
FormHold is designed to support compliance with the Children's Online Privacy Protection Act (COPPA). We take the protection of children's personal information seriously.
This page explains how FormHold protects the privacy of children under 13 years of age and how we comply with COPPA requirements. This information supplements our main Privacy Policy.
What is COPPA?
The Children's Online Privacy Protection Act (COPPA) is a U.S. federal law that protects the privacy of children under 13 years old online. COPPA requires websites and online services that collect personal information from children under 13 to:
- Post a clear and comprehensive privacy policy
- Provide direct notice to parents about data collection
- Obtain verifiable parental consent before collecting children's information
- Give parents the ability to review and delete their child's information
- Limit data collection to what is reasonably necessary
- Implement reasonable security measures to protect children's data
How FormHold Protects Children's Privacy
Parent-Controlled Accounts
FormHold accounts are created and managed by parents or legal guardians. Children cannot create their own accounts. All information about children is entered and controlled by their parent or guardian.
Parental Consent
By creating an account and adding child profiles, parents provide consent for FormHold to collect and process their children's information as described in our Privacy Policy. Parents can withdraw consent at any time by deleting child profiles or their account.
Minimal Data Collection
We only collect information about children that is necessary to provide our form management services. We collect:
- Child's name (to identify profiles and forms)
- Date of birth (for age-appropriate form processing)
- Grade level and school (for organizing school-related forms)
- Information parents choose to include in forms (medical info, emergency contacts, etc.)
No Behavioral Advertising
We do not use children's personal information for behavioral advertising, profiling, or any marketing purposes. Children's data is used solely to provide the form management services requested by parents.
Strong Security Measures
All children's data is protected with 256-bit encryption, both in transit and at rest. We implement strict access controls and regularly audit our security practices.
Parental Rights
As a parent or legal guardian, you have the following rights regarding your child's information:
Review Information
View all information stored about your child through your account dashboard at any time.
Update Information
Edit or correct any information about your child through the child profile settings.
Delete Information
Remove your child's profile and all associated data at any time through account settings.
Withdraw Consent
Stop future collection of your child's information by deleting their profile or your account.
Export Data
Download all information about your child in a portable format through Data & Export settings.
Control Sharing
Manage which organizations can access your child's information through Privacy Settings.
How We Share Children's Information
We only share children's information in the following circumstances:
- With organizations you authorize: When you submit a form to a school, sports team, or other organization, the information in that form is shared with them.
- With family members you designate: Other adults you add to your family account can view child profiles you share with them.
- With trusted contacts: If you choose to share forms via QR code or link with a trusted contact, they can view the shared information.
- With service providers: Our hosting and infrastructure providers may process data to provide services, under strict confidentiality agreements.
- As required by law: We may disclose information when legally required, such as in response to a court order.
We Never:
- Sell children's personal information
- Share information with advertisers
- Use children's data for behavioral targeting
- Allow children to make their information publicly available
For Schools and Organizations
If your school or organization uses FormHold to collect forms from families:
- You are responsible for providing required COPPA notices to parents and obtaining any necessary consent before using FormHold to collect children's information.
- Educational exception: Schools may rely on the COPPA "school consent" exception where parents have given schools permission to act on their behalf for educational technology services.
- We provide tools to help you manage consent and comply with your COPPA obligations when using our platform.
Contact Us About Children's Privacy
If you have questions or concerns about how we handle children's information, or if you would like to exercise any of your parental rights, please contact us:
FormHold Privacy Team
Email: privacy@formhold.app
Subject Line: "COPPA Inquiry"
We will respond to all COPPA-related requests within 48 hours.
Our Commitment
FormHold is committed to protecting children's privacy. We design our service with children's safety in mind and continuously review our practices to ensure compliance with COPPA and other applicable privacy laws.