Privacy Policy
Last updated: March 29, 2026
Unformal is operated by Spark Collective BV, a company registered in Belgium (VAT: BE0805193139). We are committed to protecting your privacy and handling your data responsibly.
Contact Information
What Data We Collect
When you use Unformal, we collect:
- Email address — for account creation and notifications
- Conversation transcripts — the full text of conversations between respondents and our AI
- Echo data — structured insights extracted from conversations (summaries, key quotes, sentiment scores)
- Usage metrics — conversation count, credit balance, API usage
- Attachments — images, files, and links shared during conversations
How We Use Your Data
We use your data to:
- Provide the Unformal service (conduct AI-powered conversations, extract insights)
- Generate structured outputs (Echo and Resonance) for Pulse creators
- Send notifications when conversations are completed
- Process payments and manage credit balances
- Improve our service and AI models
We do not sell your data to third parties.
Conversation data is visible only to the Pulse creator who owns it.
Third-Party Services
Unformal relies on the following third-party services to operate:
- Anthropic (Claude AI) — processes conversation text to generate responses and extract insights
- OpenAI — Whisper (transcription), GPT-4o (alternative AI model)
- Google (Gemini) — alternative AI model for conversations
- Resend — sends email notifications
- Stripe — processes payments for credit purchases
- Convex — cloud database and backend infrastructure (EU-West-1 region)
These services process data on our behalf and are bound by their own privacy policies. We choose providers that comply with GDPR and other data protection regulations.
Data Storage and Retention
- Location: All data is stored in Convex's EU-West-1 region (Ireland)
- Retention: Conversations and Echo data are stored until the workspace is deleted
- Deletion: When you delete your workspace, all associated conversations, transcripts, and Echo data are permanently removed within 30 days
Your Rights (GDPR)
If you are located in the European Union, you have the following rights:
- Access — request a copy of your data
- Rectification — correct inaccurate data
- Erasure — delete your account and all associated data
- Portability — export your data in a machine-readable format
- Objection — object to certain processing of your data
To exercise your rights, contact us at hello@unformal.ai. We will respond within 30 days.
Data Processing by AI Models
When a respondent has a conversation, their text is sent to AI providers (Anthropic, OpenAI, or Google) to generate responses and extract insights. These providers process the data according to their own privacy policies:
Important: AI-generated responses may contain errors. Unformal is not responsible for the accuracy or completeness of AI outputs.
Who Sees Your Data
- Pulse creators — can see Echo data and full transcripts for conversations in their Pulses
- Respondents — see only their own conversation (unless insights are enabled)
- Unformal team — may access data for support, debugging, or abuse prevention
- AI providers — process conversation text to generate responses
Security
We take reasonable measures to protect your data, including:
- Encrypted data transmission (HTTPS)
- Secure cloud infrastructure (Convex)
- Access controls and authentication
- Regular security reviews
However, no system is 100% secure. If you discover a security vulnerability, please report it to hello@unformal.ai.
Changes to This Policy
We may update this Privacy Policy from time to time. If we make significant changes, we will notify you via email or a prominent notice in the app. Continued use of Unformal after changes constitutes acceptance of the updated policy.
Questions?
If you have questions about this Privacy Policy or how we handle your data, contact us at hello@unformal.ai.