Privacy Policy.

1. Information we collect

Depending on how you use Forma, we may process:

• Account information: your email address, name, avatar, account identifier, sign-in provider, and authentication records.
• Creative content: prompts, instructions, uploaded files and images, generated designs, websites, and web apps, edits, project names, and publishing settings.
• Subscription information: plan, credit balance, billing status, transaction references, and subscription dates. Stripe processes card and payment details; Forma does not store complete card numbers.
• Technical information: IP address, browser and device details, timestamps, request logs, error information, and security events needed to operate and protect the service.
• Communications: messages you send us and your email preferences.

2. How we use information

We use this information to:

• create and secure your account;
• generate, save, edit, publish, and export your work;
• manage shared AI credits, subscriptions, and billing;
• provide support and send service or security notices;
• send product news or marketing where permitted, with an option to unsubscribe from promotional messages;
• prevent fraud, abuse, and technical failures;
• improve Forma and comply with legal obligations.

3. AI processing and service providers

To create the result you request, Forma sends your prompt and relevant project content to the configured AI provider. Do not put confidential, regulated, or highly sensitive personal information in a prompt or upload unless you have the right and a clear need to do so.

We use service providers to operate Forma, including Supabase for authentication and data storage, Google for optional sign-in, Stripe for subscription billing, AI providers for generation, and cloud hosting providers such as Vercel. They process information for us under their own terms and privacy commitments. We may also disclose information when required by law, to protect rights and safety, or as part of a merger, financing, acquisition, or sale of assets.

4. Cookies and local storage

Forma uses cookies and similar browser storage that are necessary to keep you signed in, protect your session, and remember service settings. If we add non-essential advertising or analytics technologies, we will update this policy and request consent where required.

5. Published work

A website or web app you publish is public and can be viewed by anyone with its link. It may also be indexed or copied by third parties. Review your project before publishing and avoid publishing personal or confidential information. Unpublishing stops Forma from serving the page at its Forma link, but it may not remove copies stored by search engines or other parties.

6. Retention and security

We keep account and project information while your account is active and as reasonably needed to provide Forma, resolve disputes, prevent abuse, maintain business records, and meet legal obligations. Retention periods vary by the type of information. Deleted data may remain temporarily in encrypted backups before routine removal.

We use reasonable administrative, technical, and organizational safeguards. No online service can guarantee absolute security, so keep your sign-in credentials private and notify us if you suspect unauthorized access.

7. Your choices and privacy rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal information. You may also withdraw consent where consent is the basis for processing. We may need to verify your identity before completing a request, and legal exceptions may apply.

You can manage your subscription from your account and unsubscribe through the link in a promotional email. For an account or privacy request, email privacy@formapages.com.

8. International use and children

Forma and its providers may process information in countries other than the one where you live. Those countries may have different data protection laws. Forma is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided information, contact us so we can review and remove it where appropriate.

9. Changes and contact

We may update this policy as Forma changes. We will post the new date here and provide additional notice when required. Questions or requests can be sent to privacy@formapages.com.