Legal

Privacy

Policy

What we collect, why we collect it, and the choices you have.

Last updated September 16, 2026

Legal

Privacy

Policy

What we collect, why we collect it, and the choices you have.

Last updated September 16, 2026

Legal

Privacy

Policy

What we collect, why we collect it, and the choices you have.

Last updated September 16, 2026

Template notice. This document is a starting template written for Forma. It is not legal advice. Have it reviewed and adapted by qualified counsel for your company and jurisdictions before publishing.

01

Who we are

This policy explains how Forma (“Forma”, “we”, “us”) collects, uses, and protects personal information when you use our website, our apps, and the services we provide (together, the “Services”). Where this policy says “you”, it means anyone who visits our site or uses the Services.

02

Information we collect

We collect only what we need to run and improve the Services:

Account information. your name, email address, password (stored as a secure hash), and workspace details.

Workspace content. the tasks, projects, comments, files, and other content you and your team create. This content belongs to you.

Billing information. plan, billing contact, and payment details, which are processed by our payment provider. We do not store full card numbers.

Usage information. how you interact with the Services, such as features used, device and browser type, and log data.

Communications. messages you send to our sales or support teams.

03

How we use information

We use personal information to:

Provide, maintain, and secure the Services;

Run the automations, integrations, and summaries you set up;

Process payments and manage your subscription;

Respond to your requests and provide support;

Understand how the Services are used so we can improve them;

Send service announcements and, where you have agreed, product updates. You can unsubscribe from updates at any time.

We do not sell personal information, and we do not use your workspace content to advertise to you.

04

Connected apps and integrations

When you connect an app such as a calendar, chat, or code-hosting app, Forma accesses only the data covered by the permissions you approve, and only to provide the features you use. You can disconnect an app at any time, which revokes Forma’s access. Your use of connected apps is also governed by those providers’ own terms and privacy policies.

05

How information is shared

We share information only in these situations:

Within your workspace, with the people you or your administrators invite;

With service providers who help us operate the Services, such as hosting, email delivery, and payment processing, under contracts that protect your information;

For legal reasons, when required by law or to protect the rights, safety, and security of our users and the Services;

In a business transfer, such as a merger or acquisition, in which case we will notify you.

06

Data retention

We keep personal information for as long as your account is active or as needed to provide the Services. When you delete your workspace, we delete its content from active systems within 30 days and from backups on their normal rotation, unless we must keep certain records to meet legal obligations.

07

Security

We use technical and organizational measures designed to protect personal information, including encryption in transit and at rest, access controls, and monitoring. No system is perfectly secure, so we also give you tools such as two-step verification to help protect your account. See our security page for more detail.

08

Your rights and choices

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can update most account information in Settings and export your workspace at any time. To make any other request, contact us. We will not discriminate against you for exercising your rights.

09

International transfers

We may process information in countries other than the one where you live. When we transfer personal information internationally, we use appropriate safeguards, such as standard contractual clauses, as required by applicable law.

10

Children

The Services are designed for work and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with information, please contact us so we can delete it.

11

This website

When you visit this website, our hosting provider processes standard request data, such as your IP address and browser type, to deliver pages securely. When you submit a form on this site, the information you enter is sent to our team so we can reply to your request.

12

Changes to this policy

We may update this policy as the Services change. If we make material changes, we will notify you by email or in the product before they take effect. The date at the top of this page shows when it was last updated.

13

Contact us

Questions about this policy or your information? Contact our team and choose “Something else” as the topic.

Create a free website with Framer, the website builder loved by startups, designers and agencies.