Last updated: March 24, 2026
Formuley LLC ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
We collect information you provide directly, including:
When you use the Service, we automatically collect:
We may receive information from third-party services you connect:
We use your information to:
We rely on different lawful bases depending on the activity:
| Processing activity | Lawful basis | Examples |
|---|---|---|
| Account, workspace, and billing operations | Contract | Authentication, formulas, subscriptions, invoices, and support needed to provide the Service. |
| Security, abuse prevention, and audits | Legitimate interests | Login monitoring, fraud checks, rate limits, AI audit metadata, and incident investigation. |
| Legal and tax compliance | Legal obligation | Required accounting records, law-enforcement response, and compliance reporting. |
| Optional marketing emails | Consent | Launch updates, trial tips, and re-engagement emails that you separately opt into and can withdraw anytime. |
When you use AI features, the prompts, files, and related content reasonably needed to provide the feature may be processed by our AI service providers, including OpenAI, acting on our behalf. For Ask Formuley and Ny, we default to minimum-necessary context rather than broad private-record retrieval. Certain opt-in workflows, such as document parsing, deformulation refinement, and marketplace publication review, process the specific content you explicitly submit into that workflow.
We only send the content reasonably necessary to operate the requested feature, and we do not sell that content or share it with other customers. Exact formula percentages, supplier details, and cost breakdowns are blocked from external AI by default unless you intentionally use a feature that requires your submitted content for that task.
We do not use customer content submitted through AI features to train or improve generalized artificial intelligence or machine learning models, and we do not authorize our AI service providers to do so for their generalized models, unless you explicitly opt in or otherwise expressly consent.
We may use de-identified and aggregated usage information, such as feature adoption, reliability, and abuse-prevention metrics, to maintain, secure, and improve the Service. This information does not identify you or reveal the substance of your formulas or other customer content.
We retain long-lived AI interaction metadata, such as timestamps, feature names, token usage, request hashes, error states, and workspace context, for audit, billing support, abuse prevention, and service security. Workspaces default to metadata-only AI logging. We do not rely on long-term storage of prompt or response content for those purposes. When workspace settings allow short-term support retention, stored AI prompt or response content is removed from active logs within 30 days.
We do NOT:
We may share your information with:
Third parties that help us operate the Service:
Supabase
Database hosting and authentication
Stripe
Payment processing
Vercel
Application hosting
Resend
Email delivery
PostHog
Product analytics (when enabled)
Sentry
Error monitoring and diagnostics
OpenAI
AI-powered features you choose to use
E-commerce platforms you authorize, including Shopify and future approved connectors, to enable integrations.
When required by law, court order, or government request.
In connection with a merger, acquisition, or sale of assets.
We do NOT sell or share your personal information to third parties for advertising or marketing purposes.
We retain your information for as long as your account is active or as needed to provide the Service. After account deletion, we retain only information required to:
Account data
Removed promptly after account deletion
Billing records
Retained for 7 years (legal requirement)
Operational log data
Retained for 90 days
AI interaction metadata
Up to 3 years for audit, fraud prevention, billing support
AI prompt or response content
No more than 30 days when workspace logging allows
Backup data
Normal encrypted backup rotation only
Workspaces default to metadata-only AI logging unless a different retention mode is explicitly enabled.
We implement industry-standard security measures to protect your information, including:
Learn more on our Security page.
If we identify a breach affecting your personal information, we will notify affected users and regulators when required by law. Where GDPR applies and a notifiable breach is confirmed, we aim to make the regulator notification within 72 hours and share available impact details and recommended next steps.
You can export your account, workspace, AI interaction, and marketing data through your account settings in JSON format. Security and fraud-prevention records are handled through verified manual requests rather than self-serve export.
You can update or correct your account information through your account settings or by contacting us.
You can delete your account and we remove account data from active systems promptly after deletion, except for information we are legally required to retain and data preserved in normal encrypted backup rotation. If a request involves security, fraud, or off-system records that are not self-serve, we handle those through a verified manual process.
Marketing emails are optional and are not required to accept our Terms or use the Service. You can opt in separately, withdraw consent at any time by clicking "unsubscribe" in any email, or update your preferences in settings. Essential service communications still apply.
You can manage cookie preferences through your browser settings or our cookie consent banner. See our Cookie Policy for details.
If you are in the European Union or EEA, you have additional rights under the General Data Protection Regulation:
To exercise these rights, contact us at privacy@formuley.io. We will respond within 30 days.
California residents have the right to:
Formuley does not sell or share personal information for cross-context behavioral advertising, and we do not offer a separate "Do Not Sell or Share My Personal Information" link because that activity is not part of our business model.
To exercise your rights, contact us at privacy@formuley.io.
The Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without parental consent, we will delete that information promptly. If you believe we have collected information from a child, please contact us at privacy@formuley.io.
Your information may be transferred to and processed in countries other than your own, including the United States, where our primary hosting and subprocessors operate today. When we transfer personal data from the EU/EEA, UK, or Switzerland to countries without an adequacy decision, we rely on appropriate safeguards such as Standard Contractual Clauses and related data processing commitments with relevant vendors where applicable.
We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service at least 30 days before the changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.
If you have questions about this Privacy Policy or our data practices, contact us at:
Mailing Address
Formuley LLC
22424 S Ellsworth Lp Rd #275
Queen Creek, AZ 85142
United States
