Privacy Policy

Local & Cloud Processing

Local features (convert, trim, extract audio, add watermark, denoise local mode, vocal separation local mode) run 100% in your browser — no upload required. Most local features are available without an account, with reasonable quality limits (e.g., 1080p max for video). Cloud features (watermark removal, denoise cloud mode, vocal separation cloud mode, subtitle generation, and cloud convert) require an account and consume credits. Files uploaded for cloud processing are encrypted during transfer. Source files are deleted immediately after processing. Output files are retained for 7 days to allow download, then automatically deleted. You can also manually delete output files anytime via your task list. We do not retain, store, or share your files beyond this period.

Data We Collect

We collect minimal analytics data including page views and feature usage events (e.g., which conversion formats are popular). This data is aggregated and cannot identify you individually. No file contents are ever collected. We do not use any third-party analytics services (such as Google Analytics) — our analytics are self-hosted.

• Page view counts
• Feature usage statistics (aggregated)
• Device type (mobile/desktop) and coarse country region (from IP) for basic analytics

Cookies & Local Storage

We use localStorage for essential functionality — to remember your language preference, to track usage limits for local features, and to store your login session (if signed in). A functional cookie is also set to persist your language preference. This data stays on your device and is never uploaded to our servers. No tracking cookies are used.

AI Training

We do not use your uploaded files, account data, or usage data to train AI models. Cloud features use AI models (e.g., Demucs, Whisper) for real-time processing only — no training or fine-tuning occurs.

Data Retention

We retain your data only as long as necessary for the purposes described in this policy:

• Analytics events — retained for 90 days, then permanently deleted.
• Account data — retained until you delete your account or request removal.
• Cloud processing files — source files deleted immediately after processing completes. Output files are retained for 7 days, then automatically deleted. You can also manually delete them anytime via your task list.

Security

We take reasonable security measures to protect your data. All communications with our servers are encrypted via HTTPS. Files uploaded for cloud processing are encrypted during transfer. Payment processing is handled by Creem — we do not store credit card information on our servers.

Legal Basis for Processing

Under GDPR, we process your data on the following legal bases:

• Legitimate interest — analytics data (page views, feature usage) is processed to improve our service.
• Contract performance — account registration, credit purchases, and cloud processing are necessary to provide the service you request.
• Consent — when you voluntarily submit feedback via our form, you consent to us processing your email and message.

Third-Party Services

We use Cloudflare for hosting and content delivery. Cloudflare may process request metadata (e.g., IP address) for security and performance purposes, in accordance with their privacy policy. We use Supabase for user authentication — if you create an account, your email address is stored by Supabase. We use RunPod for GPU-accelerated cloud processing — files uploaded for cloud features are temporarily processed on RunPod servers, then immediately deleted. We use Creem for payment processing. We do not store your credit card information. We use Resend to send account-related and feedback emails.

International Data Transfers

Your data may be processed in data centers located in the European Union and North America. Cloudflare (our CDN provider) operates a global network that may temporarily cache content at edge locations worldwide. Supabase (authentication) and RunPod (GPU processing) use servers in EU and North America only.

Communications

We only send account-related emails (e.g., password reset). We do not send marketing newsletters, promotional emails, or any unsolicited communications. If you submit feedback via our feedback form, your email and message are sent to us via Resend and are not stored in any database.

Children's Privacy

Formavide is not intended for children under 13. By using our service, you confirm that you are at least 13 years old. If we have reason to believe a user may be under 13, we will contact them to verify their age. If age cannot be confirmed, we will delete their account and any associated data.

Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

Your Rights

Under applicable data protection laws (including GDPR), you have the following rights regarding your personal data:

• Right of access — request a copy of the data we hold about you.
• Right to rectification — request correction of inaccurate data.
• Right to erasure — request deletion of your account and associated data.
• Right to data portability — request an export of your data in a machine-readable format.
• Right to restrict processing — request that we limit how we use your data.
• Right to object — object to our processing of your data for analytics purposes.

To exercise any of these rights, contact us at [email protected]. Analytics data is aggregated and cannot be linked back to you individually. You also have the right to lodge a complaint with your local data protection authority if you believe we have not handled your data properly.

Contact

If you have questions about this privacy policy, please contact us at [email protected].