All your work that has been done in the DataForm.NET Manager are saved in DataFormNet.xml, DataFormNet_Backup.xml and Message.xml. These xml files may contain some sensitive data, for instance, database connections(They are encrypted though). To prevent them from being downloaded, you can either change the permission in IIS or change the location of them. The default location is under the EasyDotNet\VersionNumber\ folder. To change the default location, you can add the following entry in the web.config:

<appSettings>
<!-- Change default location of DataFormNet.xml, DataFormNet_Backup.xml and Message.xml
<add key="DataFormNetXmlPhysicalPath" value="C:\Inetpub\wwwroot\DataFormNet\EasyDotNet\3_0\" /> -->
</appSettings>

Please note, the asp.net user that asp.net process is running on should have read and write permission on the folder specified here.

Then copy these three files to that folder. You may need to stop and restart asp.net process to make it effective. Leave the rest files alone, such as images, css, js files.