Privacy Policy

Local Processing

All processing happens locally in your browser — your files never leave your device. Formavide has no servers that process your files: nothing you open, convert, trim, denoise, separate, or watermark is ever uploaded. Most features work without an account; a free account optionally unlocks higher daily usage limits.

Data We Collect

We collect minimal analytics data including page views and feature usage events (e.g., which conversion formats are popular). Events are linked by an anonymous, randomly generated session ID stored in your browser — we do not record your email, username, password, payment information, or any form content. This data is aggregated and cannot identify you individually. No file contents are ever collected. We do not use any third-party analytics services (such as Google Analytics) — our analytics are self-hosted.

• Page view counts
• Feature usage statistics (aggregated)
• Anonymous session ID (randomly generated in your browser, not linked to your identity)
• Device type (mobile/desktop) and coarse country region (from IP) for basic analytics

Cookies & Local Storage

We use localStorage for essential functionality — to remember your language preference, to track usage limits for local features, and to store your login session (if signed in). A functional cookie is also set to persist your language preference. This data stays on your device and is never uploaded to our servers. No tracking cookies are used.

AI Training

We do not use your files, account data, or usage data to train AI models. Formavide does not train AI models at all — local processing happens entirely on your device.

Data Retention

We retain your data only as long as necessary for the purposes described in this policy:

• Analytics events — retained for 90 days, then permanently deleted.
• Account data — retained until you delete your account or request removal.
• Your files — never uploaded, so never stored by us. There is nothing to retain.

Security

We take reasonable security measures to protect your data. All communications with our servers are encrypted via HTTPS. Because your files are processed locally and never uploaded, the most sensitive data — your media — never travels over the network at all. Payments are processed by Creem (creem.io) as merchant of record; we never store credit card information on our servers.

Legal Basis for Processing

Under GDPR, we process your data on the following legal bases:

• Legitimate interest — analytics data (page views, feature usage) is processed to improve our service.
• Contract performance — account registration is necessary to provide the account features you request.
• Consent — when you voluntarily submit feedback via our form, you consent to us processing your email and message.

Third-Party Services

We use Cloudflare for hosting and content delivery. Cloudflare may process request metadata (e.g., IP address) for security and performance purposes, in accordance with their privacy policy. We use Supabase for user authentication — if you create an account, your email address is stored by Supabase. We use Resend to send account-related and feedback emails. If you purchase Pro, your order record (order ID, amount, payment and refund status) is stored in our database and processed by our payment provider Creem; card details are handled solely by Creem.

International Data Transfers

Your data may be processed in data centers located in the European Union and North America. Cloudflare (our CDN provider) operates a global network that may temporarily cache content at edge locations worldwide. Supabase (authentication) uses servers in EU and North America only. Your media files are never transferred at all — they stay on your device.

Communications

We only send account-related emails (e.g., password reset). We do not send marketing newsletters, promotional emails, or any unsolicited communications. If you submit feedback via our feedback form, your email and message are sent to us via Resend and are not stored in any database.

Children's Privacy

Formavide is not intended for children under 13. By using our service, you confirm that you are at least 13 years old. If we have reason to believe a user may be under 13, we will contact them to verify their age. If age cannot be confirmed, we will delete their account and any associated data.

Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

Your Rights

Under applicable data protection laws (including GDPR), you have the following rights regarding your personal data:

• Right of access — request a copy of the data we hold about you.
• Right to rectification — request correction of inaccurate data.
• Right to erasure — request deletion of your account and associated data.
• Right to data portability — request an export of your data in a machine-readable format.
• Right to restrict processing — request that we limit how we use your data.
• Right to object — object to our processing of your data for analytics purposes.

To exercise any of these rights, contact us at support@formavide.com. Analytics data is aggregated and cannot be linked back to you individually. You also have the right to lodge a complaint with your local data protection authority if you believe we have not handled your data properly.

Contact

If you have questions about this privacy policy, please contact us at support@formavide.com.