Privacy Policy

Last updated: January 1, 2025

1. What We Collect

We collect information you provide when signing up (name, email), data you enter into forms, device and usage data for analytics, and payment information (processed by Stripe — we never see your card number).

2. How We Use Your Data

We use your data to: provide the FormaVex service, send transactional emails (submission notifications, invitations), improve the product, and comply with legal obligations.

3. Data Storage

Your data is stored in Supabase (hosted on AWS). Files are stored in Supabase Storage. All data is encrypted at rest and in transit.

4. Data Sharing

We do not sell your data. We share data only with: Supabase (database/storage), Stripe (payments), Anthropic (AI features — only the content you submit for analysis), and as required by law.

5. Your Rights (GDPR)

If you are in the EU/EEA, you have the right to:

• Access — request a copy of your data
• Portability — export your data as JSON from Settings → Privacy
• Erasure — delete your account and all data from Settings → Privacy
• Correction — update your information in Settings
• Objection — contact us to restrict processing

6. Cookies

We use session cookies for authentication only. No third-party tracking cookies are used.

7. Data Retention

We retain your data as long as your account is active. When you delete your account, all data is permanently deleted within 30 days.

8. Children

FormaVex is not intended for users under 16. We do not knowingly collect data from children.

9. Changes

We will notify you of material changes to this policy by email. Continued use after changes constitutes acceptance.

10. Contact

For privacy questions or to exercise your rights: privacy@forma-vex.com