Draft for legal review

Privacy

This document summarizes the intended operation of the service and is not a final privacy notice. It must not be used to accept payments or enter into contracts until the operator and qualified legal counsel have completed and approved it.

Data we process

Account identity (identifier, name and email), language preferences, document metadata, uploaded files, OCR results, page usage and billing references provided by Stripe. The application is not designed to receive or store a full card number.

Purposes

Providing the service, quota control, exports, security, support, billing and compliance with applicable obligations. Content is processed to provide and protect the requested service; any additional use would require a specific legal basis and notice.

Providers

Cloudflare provides execution and storage infrastructure, Stripe handles payments when enabled, and OCR runs through a separate technical service. The final notice must identify every provider, location, transfer, safeguard and retention period before real data is processed.

Retention

The plan assigns an expiration date and users can delete data manually. Automatic purging runs periodically and in batches, so an operational delay may occur before deletion is complete. Retention by data category and provider must be verified and documented before public launch.

Rights and contact

To request access, correction, deletion, restriction, portability or objection, email privacy@formatara.com. The channel must be verified, and the final notice must also explain withdrawal of consent where applicable and the right to complain to the competent supervisory authority.

Still required: controller and contact details, representative or DPO where applicable, purposes and legal bases, data categories and sources, retention, recipients, transfers, rights, automated decisions, supervisory authority and effective date.