Legal center · Draft

Privacy policy

Preliminary version. The operator must provide its legal name, country, address, tax or registry details where required, and a working contact email before public launch. These documents require review against the actual operation and applicable laws.

1. Operator and local data

The responsible operator is not yet identified. Forma stores business, customer, contact, project, pricing and drawing information in localStorage in your browser. The editor does not automatically send quotes to an application database. Downloaded PDF and backup files remain under your control.

2. Hosting and purposes

The hosting provider may process IP addresses, requests, browser details and security logs to deliver and protect the site. Provider roles, retention periods and processing locations must be documented by the operator. Local storage maintains the workspace; exports occur at your request.

3. Legal bases and responsibilities

Professionals entering customer information must establish their own lawful basis and provide required notices. The operator must document applicable legal bases for service delivery, legal obligations, assessed legitimate interests and consent for optional measurement. Accepting general terms is not blanket consent for all processing.

4. Optional measurement

AdSense, Google Analytics and Microsoft Clarity may load throughout the site, including the editor. Consent is managed through Google Privacy & messaging. Before permission is available, tags use denied storage and may send limited cookieless signals; this does not mean no processing occurs. Editor content is masked for Clarity. Names, amounts and documents are not explicitly sent as Analytics events. Global Privacy Control and Do Not Track disable these integrations. Use Ads and measurement privacy to review consent, or Only necessary to disable local measurement. The forma-measurement-off key remembers that opt-out. Previous Forma refusals remain effective until the user chooses Google consent. The operator must complete provider, retention and transfer details before treating these documents as final.

5. Advertising and PayPal

AdSense uses Google’s code and the consent messages published by the operator in Privacy & messaging. Google manages advertising and measurement consent together. Saving privacy preferences does not enable ads. The PayPal support link contacts PayPal only when clicked; PayPal processes the payment under its own privacy terms. Forma does not collect card details. Browser or assistant integrations may access page content under their own permissions; Forma does not automatically send quotes to an AI API.

6. Retention and controls

Local projects remain until removed by you or the browser. Privacy preferences and measurement choices are stored locally; Google manages consent validity; local measurement opt-out remains until changed. Export or delete local projects from Privacy preferences. Deletion does not remove your downloaded files, copies on other devices or hosting records. Provider retention periods still require confirmation.

7. Rights and requests

Depending on the applicable law, you may have rights of access, correction, deletion, objection, restriction, portability, withdrawal of consent and complaint to a supervisory authority. The operator must publish a valid rights-request contact. An operator without a copy of your local data cannot recover or delete that browser copy remotely; other obligations remain applicable.

8. Security and international transfers

Use HTTPS hosting. Browser storage is not encrypted by Forma and may be accessible to others using the same browser profile. No absolute security guarantee is given. The operator must confirm processors, contracts, international transfer safeguards and incident procedures before public launch.