Privacy Policy

Forméla ("we", "us", "our") is operated by Donia Talaalachte, registered in the Netherlands (KVK Amsterdam). We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and Dutch privacy law.

1. Who We Are

Controller: Donia Talaalachte, trading as Forméla
Location: Amsterdam, Netherlands
Contact: privacy@formela-app.com

2. What Data We Collect

When you use Forméla, we may collect:

• Email address (when you create an account or contact us)
• Payment information (processed securely by Stripe — we never store card details)
• Usage data (niches searched, reports generated, session duration)
• Technical data (IP address, browser type, device type)
• Cookies and similar tracking technologies (see Cookie Policy)

3. Why We Process Your Data

• To provide and improve the Forméla service
• To process payments and manage your subscription
• To send transactional emails (receipts, report delivery)
• To comply with legal obligations
• To analyse usage and improve product quality

4. Legal Basis

We process your data based on: (a) contract performance — to deliver the service you paid for; (b) legitimate interests — to improve the product and prevent fraud; (c) legal obligation — where required by law; (d) consent — for marketing communications.

5. Data Sharing

We do not sell your data. We share it only with:

• Stripe — payment processing
• Anthropic — AI generation (no personal data is included in prompts)
• Netlify — hosting and infrastructure

All processors are GDPR-compliant and operate under data processing agreements.

6. Data Retention

We retain account data for as long as your account is active. Payment records are kept for 7 years as required by Dutch tax law. Usage logs are anonymised after 90 days.

7. Your Rights

Under GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion ("right to be forgotten")
• Object to processing
• Data portability
• Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens)

To exercise any right, email privacy@formela-app.com. We respond within 30 days.

8. Security

We implement industry-standard security measures including HTTPS encryption, secure API key storage via environment variables, and regular security reviews. No system is 100% secure; we will notify you of any breach within 72 hours as required by GDPR.

9. Changes

We may update this policy. Material changes will be communicated via email or prominent notice on the platform. Continued use after changes constitutes acceptance.

---

Questions? Email privacy@formela-app.com