1. Who we are
Formo is a web service that lets you generate 3D printable STL files from text descriptions using AI. We are operated by an individual developer and can be reached at g.ishay1@gmail.com.
2. Information we collect
- Account information: When you sign up, we collect your email address, first name, and last name.
- Google sign-in: If you use "Sign up with Google," we receive your email address and basic profile (name) from Google. We do not receive your Google password.
- Usage data: We store the 3D models you generate, the chat messages you send to our AI, and any photos you upload to turn into a model.
- Technical data: We log your IP address for security purposes (e.g., to detect abuse).
3. How we use your information
- To operate and provide the Formo service.
- To send you transactional emails (account verification, password reset, support tickets).
- To detect and prevent fraud or abuse.
- We do not sell your personal data to third parties.
- We do not use your data to train AI models.
- Legal basis: we process this data to perform our contract with you (providing the Service), based on our legitimate interest (fraud and abuse prevention), or based on your consent (analytics, where enabled).
4. Data storage
Your data is stored on servers located in the European Union (Finland). We use industry-standard security measures including encrypted passwords (bcrypt) and JWT authentication tokens.
- Retention: we keep your account data for as long as your account is active. Generated files and job records are cleaned up automatically after a limited period; if you delete your account, your personal data is anonymized immediately and cannot be recovered.
- International transfers: our own servers are within the European Economic Area, but some of the third-party processors listed below are located outside it (e.g. in the United States). Any transfer of your data to them relies on that provider's standard contractual clauses or another legally recognised safeguard.
5. Third-party services
- AI model providers: We send your text prompts (and any images you attach) to third-party AI providers — currently DeepSeek, Google (Gemini), Groq, OpenAI and Anthropic — to interpret your request and generate the model. See DeepSeek Privacy Policy.
- Tripo AI: When you turn a photo into a 3D sculpture, we send that image to Tripo AI to produce the 3D mesh. See Tripo AI Privacy Policy.
- Tavily: When you ask us to look up a product's real dimensions, we send that search query to Tavily's web-search API. See Tavily Privacy Policy.
- Google OAuth: Used for Google sign-in. See Google Privacy Policy.
- PostHog: Used for identified usage analytics such as page views and funnel events. See PostHog Privacy Policy.
- Sentry: Used for error monitoring; technical error reports may include limited request context. See Sentry Privacy Policy.
- Stripe: When you buy generation credits, we use Stripe as our payment processor. Stripe receives your email address and payment details to process the transaction and calculate any applicable tax; we never see or store your full card number. See Stripe Privacy Policy.
6. Your rights
- Access and portability: download a full copy of your data at any time from Settings → Your data, or by emailing us.
- Erasure: delete your account and personal data at any time from Settings → Delete account (this anonymizes your data immediately), or by emailing us.
- Rectification: ask us to correct inaccurate account information by emailing us.
- Restriction and objection: ask us to restrict or object to specific processing, including analytics — see Cookies below.
- Withdraw consent: if you accepted analytics tracking, withdraw that consent at any time from the cookie banner or Settings.
To exercise any of these rights, contact us at g.ishay1@gmail.com. If you are in the European Economic Area, you also have the right to lodge a complaint with your local data protection supervisory authority.
7. Cookies
We use localStorage to store your login token. We do not use advertising cookies. If analytics is enabled, Formo sends explicit product-usage events to PostHog without browser persistence.
8. Changes to this policy
We may update this policy from time to time. We will notify registered users by email of significant changes.