Privacy Policy
Effective · Last updated · Edition 3
In plain English
We collect your account details, what you publish, how the service is used, and technical logs. We use them to run the service, keep it secure, bill you and answer you — nothing else. We never sell personal data and never share it for advertising. Card numbers never reach us. You can export or delete everything from Account → Data & privacy. This paragraph is a summary; the document below is what actually applies.
The document
Last updated: 17 August 2026
This explains what Forumulate — operated by Alpha Visionary LLC — collects, why, and what you can do about it.
What we collect
Your account. Your name, email address, and password (stored only as a hash). If you sign in with Google or through your company's identity provider, we receive the identifiers that provider sends.
What you publish. The content you write, and the files you upload, in the organizations you belong to.
How the service is used. Page views, searches and similar events, so a space's owner can see what readers looked for. Aggregate by default.
Technical records. Request logs including IP address and user agent, kept for security and debugging; error reports when something breaks.
Payment details are never collected by us. Our payment processor handles the card; we see the subscription, not the number.
Why we hold it
To run the service you asked for; to keep it secure and abuse-free; to bill you if you are on a paid plan; and to answer you when you contact support. Where the law requires a basis, ours is the contract with you and our legitimate interest in operating the service safely.
Who else processes it
We use a small number of providers to run the service. Each processes data only to do its job:
Hosting — the servers this runs on.
Cloudflare — DNS, and the network in front of the site.
Cloudflare R2 — uploaded files and database backups.
Brevo — transactional email (verification, invitations, notifications).
Stripe — payments, on paid plans.
Error monitoring — crash reports, which may include the URL and a stack trace.
We do not sell personal data, and we do not share it for advertising.
Visitors to a customer's space
If you are reading documentation, a blog or a forum published by one of our customers, that customer decides what is published and what is collected there. They are the controller of that content; we process it for them. Ask them about their own policy.
Cookies
A session cookie when you are signed in, and cookies a space's owner has chosen to add — analytics, if they enabled it. No third-party advertising cookies.
Your rights
You can see, export and delete your data from your account settings: Account → Data & privacy exports everything we hold about you, and deleting your organization removes its content from the public web immediately.
Depending on where you live you may also have rights to correction, restriction, portability and objection, and to complain to your data protection authority. Ask us and we will act on it.
How long we keep it
Content stays while you keep it. Audit records follow the retention period your organization sets. Backups are retained on a rolling schedule and then deleted. Deleted content leaves the public web at once and ages out of backups afterwards.
Security
Traffic is encrypted in transit. Passwords are hashed. Each organization's data is isolated at the database level, and that isolation is enforced by the database rather than by application code alone. Secrets are encrypted at rest.
Changes
We will update this page when what we do changes, and the date at the top will change with it.
Contact
legal@forumulate.com
Questions
legal@forumulate.com — write to us about anything on this page.