Privacy Policy

This Privacy Policy applies to the Formly website at  formlyus.com and to the document preparation services we offer through it. By creating an account or submitting a document request, you agree to the practices described below.

Formly is a document preparation service. It is not a law firm, and using our service does not create an attorney-client relationship.

We collect the following categories of personal information:

• Account information: name, email address, and authentication credentials you provide when signing up.
• Request details: the content of the forms you submit, including mailing address, phone number, organization, records descriptions, target agency, and any justifications you provide for fee waivers or expedited processing.
• Payment information: payment method data is collected by Stripe on our behalf. We do not receive or store your full card number.
• Service metadata: order history, timestamps, IP address at the time of request, and basic device/browser information used to operate and secure the service.

We use the data we collect to:

• Prepare and deliver the documents you request.
• Process payments for your orders.
• Send transactional emails (receipts, delivery, support replies).
• Respond to questions and support requests.
• Detect and prevent fraud or abuse.
• Comply with legal obligations applicable to us.

We do not sell your personal information, and we do not use it for advertising profiling.

We rely on a small number of vendors, each processing data on our behalf under their own privacy terms:

• Stripe — payment processing.
• Anthropic (Claude API) — AI model used to draft your document. Only the information required to generate the document is sent.
• Resend — transactional email delivery.
• Supabase — managed Postgres, authentication, and file storage hosting.
• Vercel — web hosting for the Formly website.

We choose vendors that offer reasonable security and data-protection practices and that act as processors of personal data on our instructions.

Unless you ask us to delete it sooner, we retain:

• Generated documents and the associated form data for 90 days after delivery, so you can re-download them from your dashboard.
• Order and billing records for as long as required by applicable tax and commercial law.
• Account information for as long as your account is active. You can request account deletion at any time.

All users

You may request access to, correction of, or deletion of the personal information we hold about you. You may also request a copy of your data in a portable format, and you can opt out of non-essential communications at any time.

Lei Geral de Proteção de Dados Pessoais (LGPD) — Brazilian users

Under the LGPD (Lei nº 13.709/2018), you have the right to confirm the existence of processing, access your data, correct inaccurate or outdated data, request anonymization or deletion, obtain information about data sharing, and revoke your consent. You may exercise these rights by writing to us at the address below.

California Consumer Privacy Act (CCPA) — California users

If you are a California resident, you have the right to know what personal information we have collected about you, to request deletion of that information, to request correction of inaccurate data, and to opt out of the sale or sharing of personal information. We do not sell personal information. You may exercise these rights at no charge and we will not discriminate against you for doing so.

Formly uses a minimal set of cookies strictly necessary to operate the site, primarily to maintain your authenticated session. We do not use third-party analytics or advertising cookies, and we do not allow cross-site tracking.

We implement reasonable technical and organizational measures to protect your data, including encryption in transit, database-level access controls (row-level security), and limited access to production systems. No system is perfectly secure; we encourage you to choose a strong, unique password and to notify us promptly of any suspected compromise.

Formly is not intended for, and we do not knowingly collect personal information from, anyone under the age of 18. If you believe a minor has provided us with personal information, please contact us so we can delete it.

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top and, where appropriate, notify you by email or in-product.

To exercise any of your rights, ask a question about this policy, or submit a privacy request, email us at privacy@formlyus.com. We will respond within a reasonable timeframe, and in any case no later than what applicable law requires.