Privacy
Your documents stay on servers in the European Union, and the only people who see them are the people you share them with. This page says what we hold, why, who processes it for us, and how to have it removed.
Who is responsible
The controller is Untamed Production s.r.o., Školní 23, 747 64 Budišovice, Czech Republic, company number (IČO) 17352801. Write to hello@formworkai.xyz for anything about your data.
What we hold
| Your account | Name, e-mail address, a hash of your password if you set one, when you signed up and from where (a link on a shared deck, the pricing page, a partner), and when you were last here. If you choose Google or Microsoft sign-in, we also keep that provider's account identifier so you return to the same Formwork account. |
|---|---|
| Your organisation | Its name, its members and their roles, its plan and credits, the ledger of what the designer cost, and a record of who changed what. |
| Your work | The documents you make, the files you drop in, the pictures and fonts in them, comments, and the conversation with the designer for each document. |
| Payment | Stripe holds your card. We hold Stripe's customer and subscription identifiers and what was bought. |
| Technical | Server logs with addresses and requests, kept thirty days, to keep the service running and safe. A session cookie keeps you signed in. Google and Microsoft sign-in also use temporary cookies and server-side verification data that expire after ten minutes. No advertising trackers. |
Why
To provide the service you asked for (the contract with you), to bill it, to keep it secure, and to tell you about the service by mail: your deck is ready, your credits are low, your plan changed. You can turn the mail that is not about billing off from the mail itself.
Google and Microsoft sign-in
If you choose one of these providers, we request your identity, name and e-mail address to sign you in or connect the provider to your existing account. We do not request access to your inbox, contacts, calendar or files. We do not store provider access or refresh tokens, and we do not use this sign-in information for advertising or model training. Your chosen provider processes the sign-in under its own privacy policy: Google or Microsoft.
Who processes data for us
| Railway | Hosting, in the European Union (Amsterdam). Your documents and files live here. |
|---|---|
| Anthropic and OpenAI | The designer runs on their models. What you ask, the files you give it and the state of your document go to them to build the page, under their business terms, which exclude training on it. |
| Stripe | Payment. |
| Resend | Sending mail. |
| Cloudflare | In front of the service: the domain, TLS and protection from abuse. |
Anthropic, OpenAI, Stripe and Resend are in the United States; transfers rest on the EU standard contractual clauses in their terms.
How long
As long as you have an account. An owner closes an organisation under Organisation, Settings: nobody can sign in to it from then, its plan stops at the end of the month already paid for, and thirty days later its documents and files are deleted, unless an owner opens it again with the link we mail them. Billing records stay as long as the tax law requires. Server logs are kept thirty days.
Your rights
You can ask for a copy of your data, have it corrected or deleted, take it with you, and object to how it is used. Write to the address above; we answer within a month. You can also complain to the data protection authority where you live; in the Czech Republic that is the Úřad pro ochranu osobních údajů.