Privacy Policy

Template notice. This document is a starting template written for the Forma concept. It is not legal advice. Have it reviewed and adapted by qualified counsel for your company and jurisdictions before publishing.

01Who we are

This policy explains how Forma (“Forma”, “we”, “us”) collects, uses, and protects personal information when you use our website, our apps, and the services we provide (together, the “Services”). Where this policy says “you”, it means anyone who visits our site or uses the Services.

02Information we collect

We collect only what we need to run and improve the Services:

Account information. your name, email address, password (stored as a secure hash), and workspace details.
Workspace content. the tasks, projects, comments, files, and other content you and your team create. This content belongs to you.
Billing information. plan, billing contact, and payment details, which are processed by our payment provider. We do not store full card numbers.
Usage information. how you interact with the Services, such as features used, device and browser type, and log data.
Communications. messages you send to our sales or support teams.

03How we use information

We use personal information to:

Provide, maintain, and secure the Services;
Run the automations, integrations, and summaries you set up;
Process payments and manage your subscription;
Respond to your requests and provide support;
Understand how the Services are used so we can improve them;
Send service announcements and, where you have agreed, product updates. You can unsubscribe from updates at any time.

We do not sell personal information, and we do not use your workspace content to advertise to you.

04Connected apps and integrations

When you connect an app such as Google Calendar, Slack, or GitHub, Forma accesses only the data covered by the permissions you approve, and only to provide the features you use. You can disconnect an app at any time, which revokes Forma’s access. Your use of connected apps is also governed by those providers’ own terms and privacy policies.

05How information is shared

We share information only in these situations:

Within your workspace, with the people you or your administrators invite;
With service providers who help us operate the Services, such as hosting, email delivery, and payment processing, under contracts that protect your information;
For legal reasons, when required by law or to protect the rights, safety, and security of our users and the Services;
In a business transfer, such as a merger or acquisition, in which case we will notify you.

06Data retention

We keep personal information for as long as your account is active or as needed to provide the Services. When you delete your workspace, we delete its content from active systems within 30 days and from backups on their normal rotation, unless we must keep certain records to meet legal obligations.

07Security

We use technical and organizational measures designed to protect personal information, including encryption in transit and at rest, access controls, and monitoring. No system is perfectly secure, so we also give you tools such as two-step verification to help protect your account. See our security page for more detail.

08Your rights and choices

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can update most account information in Settings and export your workspace at any time. To make any other request, contact us. We will not discriminate against you for exercising your rights.

09International transfers

We may process information in countries other than the one where you live. When we transfer personal information internationally, we use appropriate safeguards, such as standard contractual clauses, as required by applicable law.

10Children

The Services are designed for work and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with information, please contact us so we can delete it.

11This preview website

This website is a concept preview. Tasks you add in the demo workspace are stored only in your browser’s local storage and are never sent to a server. The page loads fonts from Google Fonts and a photograph from Unsplash; those services receive standard browser requests, including your IP address. Forms on this site do not send messages, and no analytics or tracking scripts are added.

12Changes to this policy

We may update this policy as the Services change. If we make material changes, we will notify you by email or in the product before they take effect. The date at the top of this page shows when it was last updated.

13Contact us

Questions about this policy or your information? Contact our team and choose “Something else” as the topic.