Privacy Policy

Reforma determines how personal information is used to administer accounts, bill customers, communicate with users, and operate and protect its own Services. Under laws that use the term, Reforma is the controller for those activities.

When we process personal information in customer projects or hosted websites solely on a customer's instructions, we act as a processor or service provider. The customer determines the purposes of that processing, and our applicable data processing agreement governs our handling of the information on its behalf.

Customers can use their websites to collect form submissions, run analytics, and manage information through a content management system (CMS). This can involve contact details, messages, visitor activity, and other information the customer chooses to collect. We process information handled by Reforma's infrastructure to operate those features and follow the customer's instructions. Services connected directly by the customer also process information under the customer's arrangements.

If you interact with a website created by a Reforma customer, consult that website's privacy notice and contact its operator about its collection and use of your information. If you contact us, we will assist or direct your request as appropriate. This does not remove our responsibility for processing we carry out for our own purposes, such as protecting our hosting infrastructure.

The information involved depends on the features you use. We receive information directly from you, from workspace administrators and collaborators, from connected services you authorize, from payment providers, and automatically through your interactions with the Services.

Stripe processes payments. Its handling of personal information is described in Stripe's Privacy Policy.

Information needed to create an account, process a payment, or perform a requested feature is necessary for that activity. Without it, we may be unable to provide the relevant service. Optional profile details and marketing choices are not conditions of using unrelated features.

Project content can contain personal information about you or others. Submit it only when you have authority to do so. Do not submit sensitive information that requires safeguards or agreements the Services do not provide. Account credentials and API keys are sensitive; use the designated connection controls rather than placing them in prompts or public project code.

We use personal information to provide requested features, administer accounts and workspaces, process billing, respond to support requests, maintain and improve reliability and usability, investigate misuse, protect the Services, comply with legal obligations, and establish or defend legal claims.

We use Google Analytics on our marketing pages to understand visits and interactions, and Meta and X pixels on those pages to measure advertising results. We do not use customer project content, prompts, files, form submissions, or CMS records for advertising.

Authorized team members may access prompts, files, and related information when needed to investigate support tickets, resolve technical problems, secure the Services, or meet legal obligations. Access is limited according to job responsibilities and the task being performed. Excluding information from model training does not mean that no person can access it.

If you subscribe to marketing communications, we use your contact details to send those communications in accordance with your choices and applicable law. You can unsubscribe through the message or contact us. Essential account, billing, security, and legal notices may still be sent.

Legal bases

Where European Economic Area or UK data protection law applies, we rely on the following bases for our own processing:

You may object to processing based on legitimate interests and withdraw consent at any time. Withdrawal does not affect earlier lawful processing. Customer-directed processing is governed by the customer's instructions and applicable legal basis. We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.

AI features use providers including Anthropic, OpenAI, and Google Gemini. To perform a requested operation, we send the relevant prompt, conversation context, project code, uploaded materials, and generated content to the provider serving that feature. Context can include information within a project, not only the text of your latest prompt.

Reforma does not use your project content to train AI models. When AI requests are processed through Reforma's provider accounts, Anthropic, OpenAI, and Google Gemini do not use those requests to train their models. No-training arrangements do not necessarily eliminate provider storage or review for service operation, security, abuse prevention, or legal compliance.

Where supported, you can connect your own provider account, subscription, or API key. We use connection information to authenticate and perform the operations you request. Processing through your own account is subject to your provider's terms and settings, which can allow different training, retention, or human-review practices. Review those terms and settings before using the connection.

Reforma does not control a provider's independent practices under your subscription. We remain responsible for our own handling and disclosure of personal information and the obligations that apply to us. Disconnecting a provider stops our use of that connection; it does not automatically erase information already received by the provider or cancel your separate subscription.

We disclose information as necessary for the purposes described in this Policy:

• Infrastructure: OVH US hosts our main application database. Cloudflare R2 stores files. Vercel and Cloudflare host and deliver customer websites. Our infrastructure also uses Hetzner and temporary sandboxes. These providers process the content and technical information needed for their respective functions.
• AI: Anthropic, OpenAI, and Google Gemini process information needed for AI features as described above.
• Payments: Stripe processes billing and transaction information needed to handle payments and related services.
• Email and support: Google Workspace processes emails and attachments, including information you provide when contacting support.
• Other Google APIs: Google Cloud APIs support selected features, such as maps. Requests include the information needed for the selected function, such as a location search, together with relevant technical request information.
• Analytics and advertising: Google Analytics, Meta (Facebook and Instagram), and X receive marketing-page information through their tools, subject to your choices. Advertising partners may process information for their own purposes under the applicable arrangements and their privacy policies.
• Workspace participants: administrators and collaborators can access information made available through their workspace or project permissions.
• Publication and your instructions: publishing a website makes its content available to visitors. We also disclose information when you instruct us to share it or connect another service. Public content can be copied or indexed by others, and removing it from Reforma does not remove every independent copy.
• Legal and protective purposes: we may disclose relevant information to authorities, courts, professional advisers, or other recipients where required by law or reasonably necessary and lawful to protect people, secure the Services, or pursue or defend legal claims.
• Business transactions: relevant information may be disclosed to counterparties and advisers in a financing, merger, acquisition, reorganization, or sale of assets, subject to appropriate confidentiality and lawful-use restrictions.

Providers processing information on our behalf are subject to contractual protections and instructions appropriate to their role. A provider's independent processing, including services you contract for directly, is also governed by its own privacy notice.

We use cookies and similar technologies needed for login, security, service operation, and remembering privacy choices. Optional technologies are controlled separately.

On Reforma's marketing pages, Google Analytics measures visits and interactions, and Meta and X pixels measure advertising results. These tools can collect browser and device information, identifiers, visited pages, referral information, and conversion events. Advertising partners may associate this information with information they hold about you and your activity on other services. See Google's partner-site privacy information, Meta's Privacy Policy, and X's Privacy Policy.

Reforma's marketing analytics and advertising pixels are limited to marketing pages. We do not place those pixels in the editor or on customer-hosted websites. Customers may independently configure analytics or advertising tools on their websites and are responsible for the related notices and choices.

Optional analytics and advertising tools remain off until you consent. You can accept, reject, or choose categories in the consent panel and change or withdraw your choice through Cookie Settings in the website footer. The panel provides details of the technologies, providers, purposes, and durations. Rejecting optional tracking does not prevent use of the core Services.

Advertising disclosures of online identifiers and internet activity to Meta or X may fall within legal definitions of sale, sharing, or targeted advertising even without payment for the data. We treat those disclosures as subject to the corresponding opt-out choices. You can opt out through Your Privacy Choices in the footer or by disabling advertising in Cookie Settings. We do not sell customer project content or disclose it for cross-context behavioral advertising.

We honor Global Privacy Control and other legally recognized opt-out signals for sale, sharing, and targeted advertising. A signal applies to the browser or device sending it and, where we can associate it with your account, to that account as required by law. You do not need an account to opt out. The older Do Not Track browser setting does not separately change our practices; Cookie Settings and recognized opt-out signals control the choices described here.

Browser settings can also block cookies, but blocking necessary storage can affect login or other features. Browser controls do not replace the choices available on our website or necessarily prevent every form of data collection.

We keep personal information only for as long as needed for the purposes described in this Policy. The following periods apply to information under our control, subject to earlier deletion when no longer needed and the limited exceptions below.

For forms, CMS content, and visitor analytics processed on a customer's behalf, ordinary retention follows the customer's instructions and processing agreement. Our 30-day active-system and 90-day backup deletion limits apply following a valid, verified deletion instruction. Customer instructions do not override applicable legal obligations.

We pass applicable deletion instructions to providers processing information on our behalf and require appropriate deletion or restricted retention under our agreements. AI providers may retain limited records for security, abuse prevention, or legal obligations. Information processed independently by advertising partners or through your own provider subscription is also subject to their retention rules and your rights with them.

You may request account deletion at info@reforma.ai. Deletion ends access to the account and its projects, takes associated websites offline, and ends future Reforma subscription renewals for the account. It does not cancel subscriptions you bought directly from other providers. Cancelling a Reforma subscription without deleting the account preserves eligible Free projects and does not itself start a deletion period.

We may retain limited information where necessary and lawful for accounting and tax obligations, security investigations, legal claims, or another legal exception. We restrict its use to that purpose and delete it when the justification ends. Statutory deadlines take precedence over the periods above; verification must not unnecessarily delay a request. Deleting an individual's account does not by itself authorize deletion of an organization's entire shared workspace or other people's information.

Our main application database is hosted by OVH US in the United States. Temporary sandboxes operate in the United States, Canada, and Germany. Files are stored using Cloudflare R2, and customer websites use Vercel and Cloudflare hosting and delivery services.

Information may also be processed in other countries where our providers operate or authorized personnel access it. Storage, delivery, and remote-access locations can differ. These countries may have privacy laws different from those where you live; using a global delivery network does not mean that every file is stored in every country.

Where international transfers require safeguards, we use an applicable adequacy decision or appropriate contractual safeguards, including European Commission standard contractual clauses and applicable UK transfer terms, as appropriate to the transfer. We apply supplementary protections where required. Contact info@reforma.ai for information about processing locations and the safeguards applicable to your information, or to request a copy of the relevant safeguards, subject to necessary protection of confidential information.

Depending on your location and applicable law, you may have rights to:

• Access your personal information and obtain information about its collection, use, and disclosure.
• Correct inaccurate information, request deletion, and obtain a portable copy.
• Restrict or object to processing, including processing based on legitimate interests.
• Withdraw consent without affecting earlier lawful processing.
• Opt out of sale, sharing, targeted advertising, or certain profiling, and limit certain uses of sensitive personal information.
• Appeal a refusal of a privacy request and complain to a competent privacy regulator.

You can object to direct marketing at any time. We do not unlawfully discriminate against you for exercising your rights. We use sensitive information, such as credentials or sensitive content you submit, to provide requested services, protect the Services, and meet legal obligations, rather than to infer characteristics for advertising.

Send requests to info@reforma.ai, identifying the account or interaction concerned. We may request proportionate information to verify your identity or an authorized agent's authority. Do not send passwords, API keys, or full payment-card details. Opting out of sale, sharing, or targeted advertising does not require a verified account or an identity-verification request.

We respond within the time required by applicable law and explain any lawful extension or refusal. If we refuse a request, you may appeal by replying to our response or emailing us with “Privacy appeal” in the subject. We review the appeal and explain the outcome and any available regulator complaint route. People in the EEA may complain to their competent data protection authority, and people in the UK may complain to the Information Commissioner's Office, without first contacting us.

If information is processed solely on a customer's behalf, we assist that customer with requests as required. Rights can be subject to lawful exceptions, including protecting other people's information and retaining legally required records. Personal-data portability rights do not, by themselves, create an unrestricted project-code export feature.

We use technical and organizational measures designed to protect personal information, including access controls, encryption in transit and at rest, protected storage of connection credentials, and processes for investigating security incidents. Access by personnel is limited to authorized purposes and subject to confidentiality obligations.

No online service or storage system can guarantee absolute security. Contact info@reforma.ai if you believe your account or information has been compromised. We provide notifications of personal information breaches where required by applicable law.

Reforma accounts and the website-building platform are intended for people aged 18 or older. We do not knowingly collect children's personal information for their use of those accounts. If you believe a child has supplied information to us in that way, contact us so we can investigate and take appropriate action, including deletion where required.

The account age requirement does not determine the audience of every customer-published website. Customers are responsible for their websites' audiences, notices, permissions, and any additional safeguards required when processing children's information. Our obligations for information processed on their behalf remain governed by applicable law and our processing arrangements.

We may update this Policy to reflect changes in our practices or legal requirements. We will update the effective date and give appropriate notice of material changes through the Services, by email, or another method required by law. Where consent is required for a new use, we obtain it before starting that processing.

Email: info@reforma.ai