Template notice. This document is a starting template written for Forma. It is not legal advice. Have it reviewed and adapted by qualified counsel for your company and jurisdictions before publishing.
01
This policy explains how Forma (“Forma”, “we”, “us”) collects, uses, and protects personal information when you use our website, our apps, and the services we provide (together, the “Services”). Where this policy says “you”, it means anyone who visits our site or uses the Services.
We collect only what we need to run and improve the Services:
Account information. your name, email address, password (stored as a secure hash), and workspace details.
Workspace content. the tasks, projects, comments, files, and other content you and your team create. This content belongs to you.
Billing information. plan, billing contact, and payment details, which are processed by our payment provider. We do not store full card numbers.
Usage information. how you interact with the Services, such as features used, device and browser type, and log data.
Communications. messages you send to our sales or support teams.
We use personal information to:
Provide, maintain, and secure the Services;
Run the automations, integrations, and summaries you set up;
Process payments and manage your subscription;
Respond to your requests and provide support;
Understand how the Services are used so we can improve them;
Send service announcements and, where you have agreed, product updates. You can unsubscribe from updates at any time.
We do not sell personal information, and we do not use your workspace content to advertise to you.
When you connect an app such as a calendar, chat, or code-hosting app, Forma accesses only the data covered by the permissions you approve, and only to provide the features you use. You can disconnect an app at any time, which revokes Forma’s access. Your use of connected apps is also governed by those providers’ own terms and privacy policies.
We keep personal information for as long as your account is active or as needed to provide the Services. When you delete your workspace, we delete its content from active systems within 30 days and from backups on their normal rotation, unless we must keep certain records to meet legal obligations.
We use technical and organizational measures designed to protect personal information, including encryption in transit and at rest, access controls, and monitoring. No system is perfectly secure, so we also give you tools such as two-step verification to help protect your account. See our security page for more detail.
Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can update most account information in Settings and export your workspace at any time. To make any other request, contact us. We will not discriminate against you for exercising your rights.
We may process information in countries other than the one where you live. When we transfer personal information internationally, we use appropriate safeguards, such as standard contractual clauses, as required by applicable law.
The Services are designed for work and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with information, please contact us so we can delete it.
When you visit this website, our hosting provider processes standard request data, such as your IP address and browser type, to deliver pages securely. When you submit a form on this site, the information you enter is sent to our team so we can reply to your request.
We may update this policy as the Services change. If we make material changes, we will notify you by email or in the product before they take effect. The date at the top of this page shows when it was last updated.
Questions about this policy or your information? Contact our team and choose “Something else” as the topic.