Who we are
Forma is run by Forma Planner, Inc. at forma.events. The person answering privacy questions is Jorge at jorge@forma.events. Write to that address for anything on this page.
What we collect
Your account. Your name, your email address, a password if you set one, and the name of your studio. If you sign in with Google, Google gives us your name, your email address and your profile picture, and nothing else. We never see your Google password.
Your work. Everything you put into Forma to run a wedding: guest lists, RSVPs and dietary notes, vendors and their contracts, budgets, quotes and invoices, itineraries, seating plans, files you upload, and the messages on each wedding's board, including the questions you ask the concierge and its answers. Much of this is information about other people, your couples, their guests and your vendors. You are responsible for having the right to put it in Forma; we are responsible for keeping it safe and using it only to run your studio.
Billing. When you subscribe, Stripe collects your card and handles the charge. Stripe holds the card; we keep your subscription status and your invoices. The full card number never touches our servers.
How the product is used. Server logs (the address your device connects from, the browser, the pages requested, the time) and error reports, so we can keep the service up and fix what breaks. We do not run advertising trackers and we do not build profiles of you for anyone.
Why we collect it
To run the product you signed up for: sign you in, show you your weddings, send the emails the product sends (invitations to your team and couples, RSVP mail, reminders, receipts), answer concierge questions from your own files, bill you, and stop abuse. That is the whole list. We do not sell personal information and we do not share it with advertisers.
Who processes it for us
Forma runs on other companies' infrastructure. Each one only gets what its job needs.
Supabase stores the database and handles sign-in. Vercel hosts the application and serves the pages. Stripe handles payments. Google handles sign-in if you choose Continue with Google. Cloudflare Turnstile checks that a signup is a person and not a script. Resend delivers the emails the product sends. Upstash counts requests so one account cannot flood the service. If you connect your calendar, Calendly holds that connection and we store the token that keeps it linked; disconnect it and the token goes. When you ask the concierge a question, the question and the records needed to answer it (that wedding's guests, its ledger, its tasks and vendors) are sent to OpenAI, which writes the answer. OpenAI is not allowed to use them to train its models. It keeps a copy for up to 30 days to watch for abuse and then deletes it. If OpenAI is down, the concierge answers through Anthropic instead, on the same terms. Anthropic also reads a spreadsheet you import so its columns land in the right places, and drafts replies to leads for you to edit. When you use Set the scene to make a concept image, what Forma knows about that design (the guide's title and notes, the palette, the wedding's city) and any reference images you attached are sent to OpenAI to generate it. Guest lists, budgets and messages never go with an image.
We do not sell or rent your data to anyone, and we do not share it with anyone outside this list except when the law requires it or when you ask us to.
Cookies and sessions
Forma uses cookies to keep you signed in, to remember your language and your appearance setting, and, if you arrived through a planner's referral link, to credit that planner when you sign up. If you tick Stay signed in, the session lasts longer; if you do not, it ends when you close the browser or after a period of inactivity. There are no advertising cookies and no third-party analytics cookies. Turnstile sets a cookie on the signup page to do its check.
Where the data lives
On Supabase and Vercel servers in the United States. If you are in the European Union, the United Kingdom or elsewhere, your data is transferred to the United States to run the service. We rely on the standard contractual terms our providers offer for those transfers. We do not hold any certification and we will not claim one we do not have.
How long we keep it
As long as your account is open. When you close your account, or ask us to delete it, we delete your studio's data within 30 days, apart from what we must keep for tax and accounting (invoices, for the period the law requires) and copies in backups, which expire on their own within 90 days. Couples and guests who were only ever in your account are deleted with it.
Your rights, and how to use them
You can see everything Forma holds about your studio by signing in; it is your data and it is all there. You can export your guest lists, budgets and other records from inside the product. You can correct anything yourself. You can delete your account from Settings, or by writing to jorge@forma.events, and we will confirm when it is done.
If you are a couple or a guest whose information a planner put into Forma, the planner is the one who decides what is stored. Ask them first; if you cannot, write to us and we will help.
Depending on where you live, the law may give you specific rights to access, correct, delete, export or object. Whatever the law calls them, the way to use them with Forma is the same: sign in and do it, or write to us and we will do it for you, usually within a few days and never later than a month.
Children
Forma is for working planners and their clients. It is not for anyone under 16 and we do not knowingly hold accounts for them. Guest lists sometimes include children's names and meal choices; that is your data about your couples' guests, handled exactly like the rest of it.
Security
Passwords are hashed, connections are encrypted, and every row in the database is locked to the studio that owns it. Only the people you invite can see a wedding. No system is perfectly safe; if something goes wrong with your data we will tell you what happened and what we did about it.
Changes
When this page changes we update the date at the top and, if the change matters to how your data is handled, we email account owners before it takes effect.
Contact
Jorge, at jorge@forma.events. Forma Planner, Inc., a Delaware corporation.