Privacy Policy

1. Information We Collect

1.1 Information You Provide

We collect information you provide directly, including:

Account Information: Name, email address, password, and billing information
Profile Information: Business name, address, and preferences
Content: Formulas, ingredients, batches, and other data you create or upload
Communications: Messages you send us, support requests, and feedback
Payment Information: Credit card details (processed securely by Stripe)

1.2 Information Collected Automatically

When you use the Service, we automatically collect:

Usage Data: Features used, actions taken, time spent, and click patterns
Device Information: Browser type, operating system, device identifiers
Log Data: IP address, access times, pages viewed, and referring URLs
Cookies: Small data files stored on your device (see our Cookie Policy)

1.3 Information from Third Parties

We may receive information from third-party services you connect:

E-commerce Platforms: Order data from Shopify, Etsy, WooCommerce
Authentication Providers: If you sign in with Google or other providers

2. How We Use Your Information

We use your information to:

Provide, maintain, and improve the Service
Process transactions and send billing notifications
Send service-related communications (updates, security alerts, support)
Respond to your inquiries and provide customer support
Personalize your experience and provide relevant features
Analyze usage patterns to improve the Service
Detect, prevent, and address fraud and security issues
Comply with legal obligations
Send marketing communications (with your consent)

2.1 AI Feature Usage

When you use AI features, your inputs are processed by our AI systems to generate outputs. We may use anonymized and aggregated data from AI interactions to improve our AI models.

We do not use your specific formulas or proprietary information to train AI models without your explicit consent. You can manage AI training preferences in Settings > Privacy > AI Training Preferences.

We do NOT:

Sell your personal data to third parties
Share your formulas with other users or competitors
Use your data for third-party advertising
Read or analyze your proprietary formulas

3. How We Share Your Information

We may share your information with:

Service Providers

Third parties that help us operate the Service:

Supabase - Database hosting and authentication
Stripe - Payment processing
Vercel - Application hosting
Resend - Email delivery

Connected Platforms

E-commerce platforms you authorize (Shopify, Etsy) to enable integrations.

Legal Requirements

When required by law, court order, or government request.

Business Transfers

In connection with a merger, acquisition, or sale of assets.

We do NOT sell your personal information to third parties for marketing purposes.

4. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. After account deletion, we retain data for a limited period to:

Comply with legal obligations (tax records, dispute resolution)
Enforce our Terms of Service
Maintain security and prevent fraud

Retention Periods

Account data: Deleted within 30 days of account closure
Billing records: Retained for 7 years (legal requirement)
Log data: Retained for 90 days
Backup data: Deleted within 90 days of primary data deletion

5. Data Security

We implement industry-standard security measures to protect your information, including:

Encryption of data in transit (TLS/SSL) and at rest (AES-256)
Secure password hashing (bcrypt)
Regular security assessments and monitoring
Access controls and employee training
Secure cloud infrastructure
Row-level security ensuring data isolation

Learn more on our Security page.

Data Breach Notification

In the event of a data breach that affects your personal information, we will notify affected users within 72 hours of discovering the breach. We will provide information about what data was affected and steps you can take to protect yourself.

6. Your Rights and Choices

6.1 Access and Portability

You can access, download, and export your data at any time through your account settings. We provide data exports in standard formats (JSON, CSV).

6.2 Correction

You can update or correct your account information through your account settings or by contacting us.

6.3 Deletion

You can request deletion of your account and personal data. We will delete your data within 30 days, except for information we are legally required to retain.

6.4 Marketing Communications

You can opt out of marketing emails by clicking "unsubscribe" in any email or updating your preferences. You will still receive essential service communications.

6.5 Cookies

You can manage cookie preferences through your browser settings or our cookie consent banner. See our Cookie Policy for details.

7. Rights for EU/EEA Users (GDPR)

If you are in the European Union or EEA, you have additional rights under the General Data Protection Regulation:

Right to Access: Request a copy of your personal data
Right to Rectification: Request correction of inaccurate data
Right to Erasure: Request deletion of your data ("right to be forgotten")
Right to Restriction: Request limitation of processing
Right to Portability: Receive your data in a portable format
Right to Object: Object to processing based on legitimate interests
Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at privacy@formuley.io. We will respond within 30 days.

8. Rights for California Users (CCPA)

California residents have the right to:

Know what personal information we collect and how it's used
Request deletion of your personal information
Opt out of the sale of personal information (we do not sell your data)
Non-discrimination for exercising your rights

To exercise your rights, contact us at privacy@formuley.io.

9. Children's Privacy

The Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without parental consent, we will delete that information promptly. If you believe we have collected information from a child, please contact us at privacy@formuley.io.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States. We ensure appropriate safeguards are in place for international transfers, including Standard Contractual Clauses approved by the European Commission where applicable.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service at least 30 days before the changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.