Privacy policy

1. Who we are

[to be added before launch] ([to be added before launch]) runs Formamigo and is the controller of your personal data. For anything about your data, write to [to be added before launch].

2. What we process

• Documents you upload, the answers written into them, and images you place on them (such as a signature or photo).
• Your chat messages and typed answers. Forms often ask for identity, address, tax, family or immigration details. Some also ask for special categories of data, such as health, religion or ethnic origin. We only ask for what the form needs.
• Saved details (memory), only if you turn memory on: the details you choose to keep for later forms.
• Account data: your email address, sign-in sessions and your credits.
• Google sign-in, only if you choose "Continue with Google": Google sends us your name, email address and profile picture. We do not keep Google access tokens and never access your Google account.
• Order records: order number, pack and amount. We never receive your card details.
• Security data: a salted hash of your IP address and counts of uploads and messages, used to apply daily limits and prevent abuse.
• Technical logs: our hosting provider records the IP address, time and page of each request, to keep the service running and secure.
• Usage statistics: pages visited (counted without cookies) and steps such as upload, chat, payment and download, linked to a random document number. They never include document contents, chat text, names or email addresses. We also count the AI work per document (numbers only) to keep prices fair.

3. Why we use it (legal bases)

• To fill your forms, run your account and deliver what you paid for: performance of a contract (GDPR Art. 6(1)(b)).
• Special categories of data in a form (such as health or religion) are processed only to fill the form you chose, with your explicit consent (Art. 9(2)(a)), which you give when you start filling it and can withdraw by deleting the document.
• To remember your details for later forms: your consent (Art. 6(1)(a)), which you can withdraw at any time by turning memory off.
• To keep the service secure, prevent misuse and understand how it is used, with no content and no cookies: legitimate interest (Art. 6(1)(f)).
• To keep order records for tax and accounting: legal obligation (Art. 6(1)(c)).

Withdrawing consent doesn't affect what was done before you withdrew it.

You don't have to give us any data. Without your answers the form stays blank, and without an email address you can't create an account or buy credits.

4. AI processing

To read the form and prepare answers, the PDF, the form's questions and your chat messages are sent to our AI provider, Mistral AI (France). It processes them only to answer us, does not use them to train its models, and deletes them right after answering or, if it keeps them briefly to detect abuse, within 30 days. Section 6 explains how your data is protected if the provider is outside the EU.

Finding the blanks on printed forms runs on our own servers. The AI suggests answers; you check them before downloading. No decision with legal effects is made automatically.

5. How long we keep it

• Documents without an account: 7 days after upload.
• Documents in an account: 30 days after your last activity on them. You can delete any document sooner with "Delete now".
• Saved details: until you delete them, turn memory off and delete them, or delete your account.
• Account: until you delete it. Order records are then kept without your email for as long as tax law requires.
• Security counts: 30 days. AI work counts per document (numbers only): 365 days.
• Technical logs: at most 30 days.

6. Who we share it with

Only with service providers that help us run Formamigo, under data processing agreements:

• Hosting and storage: Hetzner Online GmbH (Germany), in the EU.
• AI processing: Mistral AI (France).
• Sign-in emails: Brevo (France).
• Optional sign-in: Google (Google Ireland Limited), only when you choose "Continue with Google".
• Usage statistics: PostHog (EU Cloud, Frankfurt).

Payments are handled by Paddle (Paddle.com Market Ltd, United Kingdom), which acts as merchant of record and is responsible for your payment data as an independent controller; see its own privacy notice. The EU recognises the United Kingdom as protecting data adequately. Where any other provider processes data outside the EU, the transfer is protected by the EU–US Data Privacy Framework or the EU Standard Contractual Clauses. We never sell your data.

7. Your rights

You can access, correct or delete your data, receive a copy, ask us to restrict processing, object to processing based on our legitimate interest, and withdraw consent at any time. Deleting documents, saved details and your account is available directly in your account; for anything else, write to [to be added before launch]. We may ask you to confirm it's you. We answer within one month, or tell you within that month if a complex request needs up to two more.

You can also complain to the Portuguese data protection authority, the CNPD.

8. Security

Connections are encrypted (HTTPS). Saved details are encrypted in our database. Access to systems is limited to what is needed to run the service, and we never write document contents or answers to our logs. If a data breach puts you at risk, we will tell you without delay.

9. Age

You must be 18 or older to create an account or pay. Parents and guardians can fill in forms for their children.

10. Changes

If we change this policy in a meaningful way, we will say so on the website, and by email if you have an account, before the change applies.