Privacy Policy
Last updated: September 1, 2026 · Effective immediately
You own 100% of the case studies, notes, drafts, and assets you upload to Forma. We never sell your personal data or train public models on your proprietary design drafts.
1. Information We Collect
When you create an account, complete our guided onboarding, or build a case study, we collect information you provide directly to us:
- Account Data: Your name, email address, password hash (hashed via argon2id), and profile preferences.
- Project Content: Draft text, interview responses, section notes, metrics, and case study metadata.
- Media Assets: Screenshots, wireframes, and photos uploaded to your projects (stored securely in encrypted cloud storage).
- Billing Information: Payment transactions processed securely through Paystack. We never store raw credit card numbers.
2. How We Use Your Data
We use the information we collect exclusively to operate and deliver the Forma service:
- To generate, format, and render your 7-section case study drafts.
- To compute hiring rubric feedback scores and editorial suggestions.
- To host your public case studies at custom domains or shareable URLs (madewithforma.co/c/[slug]).
- To authenticate your sessions and protect against brute-force attacks.
3. Data Ownership & Intellectual Property
You retain complete, exclusive ownership of all design work, case studies, and text created within Forma. Forma claims zero copyright over user-generated case studies.
4. Data Retention & Account Deletion
If you choose to delete your account, your profile and projects enter a 30-day soft-delete grace period before permanent, irreversible deletion from all production databases and storage buckets.
5. Contact & Privacy Inquiries
For questions regarding this policy or to request data export or deletion, contact our privacy team: