Privacy Policy

Last updated: February 17, 2026

1. Introduction

This Privacy Policy describes how Kundo Studio (“we”, “us”, “our”) collects, uses, and protects your information when you use Use Forma (“Service”). We are committed to protecting your privacy and handling your data transparently.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, and authentication data through Clerk (our authentication provider). If you sign in with Google, we receive your name and email from Google.

Workspace Data

Content you create within the Service, including client information, proposals, contracts, invoices, time entries, documents, and collaborator details. This data is stored in your workspace and is isolated from other users' workspaces.

Payment Information

When you subscribe to a paid plan, payment is processed by Stripe. We store your Stripe customer ID and subscription status but do not store your full credit card number on our servers.

Usage Data

We collect information about how you use the Service, including features accessed, actions performed, and error logs, to improve the Service and provide support.

Files

Documents and files you upload are stored on Cloudflare R2. Each file is stored in an isolated path associated with your workspace.

Emails

When we send emails on your behalf (proposals, invoices, contracts), we log the email event (recipient, type, timestamp) for your audit trail. Emails are sent through Resend from hello@kundo.studio.

3. How We Use Your Information

We use your information to: (a) provide and maintain the Service, (b) process payments and manage subscriptions, (c) send transactional emails (proposals, invoices, contracts, notifications), (d) provide customer support, (e) improve the Service based on usage patterns, (f) enforce our Terms of Service.

4. Data Storage and Security

Your data is stored on: PostgreSQL database hosted on Neon (US East region), file storage on Cloudflare R2, authentication managed by Clerk. We implement workspace isolation on every database query to ensure you can only access data within your own workspace. All data is transmitted over HTTPS.

5. Data Sharing

We do not sell your personal information. We share data only with the following service providers who are necessary to operate the Service: Clerk (authentication), Stripe (payments), Cloudflare R2 (file storage), Neon (database hosting), Resend (email delivery), Vercel (hosting). Each provider has their own privacy policy and data processing agreements.

6. Client Portal and Public Links

When you share proposals, contracts, or invoices via public links, the recipients can view the shared content without creating an account. We log views and actions (approvals, signatures) on shared content for your audit trail.

7. Cookies and Tracking

We use essential cookies for authentication (managed by Clerk). We do not use advertising cookies or third-party tracking scripts. We do not run Google Analytics or similar tracking tools.

8. Your Rights

You have the right to: (a) access your data — all your data is visible within the Service, (b) export your data — you can download documents and PDFs at any time, (c) delete your data — you can delete individual records from the Service, (d) close your account — contact us at help@useforma.xyz.

9. Data Retention

We retain your data for as long as your account is active. If you cancel your subscription, your data remains accessible on the Free plan. If you request account deletion, we will delete your data within 30 days, except where retention is required by law.

10. Children's Privacy

The Service is not intended for children under 16. We do not knowingly collect personal information from children under 16.

11. International Users

The Service is hosted in the United States. If you access the Service from outside the US, your data will be transferred to and processed in the US.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes via email or in-app notification. The “Last updated” date at the top will be revised.

13. Contact

For privacy-related questions or requests, contact us at help@useforma.xyz.