# Privacy Policy

> How Unformal collects, uses, stores and deletes your data. Operated by Spark Collective BV, Belgium.

**URL:** https://unformal.ai/privacy
**Updated:** 2026-03-31
**Topics:** privacy policy, GDPR, Spark Collective BV, data retention, Convex, data processing

## Summary

Unformal's privacy policy, last updated 31 March 2026. Unformal is operated by Spark Collective BV, a Belgian company (VAT BE0805193139) based in Gent. It collects email addresses, conversation transcripts, Echo structured data, usage metrics and attachments. Data is stored in Convex's EU-West-1 region in Ireland and deleted within 30 days of workspace deletion. Conversation text is processed by Anthropic, OpenAI and Google to generate responses. Unformal does not sell data to third parties. EU users have GDPR rights of access, rectification, erasure, portability and objection via hello@unformal.ai.

---

Unformal is operated by Spark Collective BV, a company registered in Belgium (VAT: BE0805193139). We are committed to protecting your privacy and handling your data responsibly.

## Contact Information

- **Company** — Spark Collective BV
- **VAT** — BE0805193139
- **Location** — Gent, Belgium
- **Email** — hello@unformal.ai

## What Data We Collect

When you use Unformal, we collect:

- **Email address** — for account creation and notifications
- **Conversation transcripts** — the full text of conversations between respondents and our AI
- **Echo data** — structured insights extracted from conversations (summaries, key quotes, sentiment scores)
- **Usage metrics** — conversation count, credit balance, API usage
- **Attachments** — images, files, and links shared during conversations

## How We Use Your Data

We use your data to:

- Provide the Unformal service (conduct AI-powered conversations, extract insights)
- Generate structured outputs (Echo and Resonance) for Pulse creators
- Send notifications when conversations are completed
- Process payments and manage credit balances
- Improve our service and AI models

We do not sell your data to third parties.

Conversation data is visible only to the Pulse creator who owns it.

## Third-Party Services

Unformal relies on the following third-party services to operate:

- **Anthropic (Claude AI)** — processes conversation text to generate responses and extract insights
- **OpenAI** — Whisper (transcription), GPT-4o (alternative AI model)
- **Google (Gemini)** — alternative AI model for conversations
- **Resend** — sends email notifications
- **Stripe** — processes payments for credit purchases
- **Convex** — cloud database and backend infrastructure (EU-West-1 region)

These services process data on our behalf and are bound by their own privacy policies. We choose providers that comply with GDPR and other data protection regulations.

## Data Storage and Retention

- **Location** — All data is stored in Convex's EU-West-1 region (Ireland)
- **Retention** — Conversations and Echo data are stored until the workspace is deleted
- **Deletion** — When you delete your workspace, all associated conversations, transcripts, and Echo data are permanently removed within 30 days

## Cookies

Unformal uses minimal cookies:

- **Authentication session cookie** — keeps you logged in
- **No tracking cookies** — we do not use analytics cookies or third-party tracking

## Your Rights (GDPR)

If you are located in the European Union, you have the following rights:

- **Access** — request a copy of your data
- **Rectification** — correct inaccurate data
- **Erasure** — delete your account and all associated data
- **Portability** — export your data in a machine-readable format
- **Objection** — object to certain processing of your data

To exercise your rights, contact us at hello@unformal.ai. We will respond within 30 days.

## Data Processing by AI Models

When a respondent has a conversation, their text is sent to AI providers (Anthropic, OpenAI, or Google) to generate responses and extract insights. These providers process the data according to their own privacy policies:

- **Anthropic Privacy Policy** — https://www.anthropic.com/legal/privacy
- **OpenAI Privacy Policy** — https://openai.com/privacy
- **Google Privacy Policy** — https://policies.google.com/privacy

Important: AI-generated responses may contain errors. Unformal is not responsible for the accuracy or completeness of AI outputs.

## Who Sees Your Data

- **Pulse creators** — can see Echo data and full transcripts for conversations in their Pulses
- **Respondents** — see only their own conversation (unless insights are enabled)
- **Unformal team** — may access data for support, debugging, or abuse prevention
- **AI providers** — process conversation text to generate responses

## Security

We take reasonable measures to protect your data, including:

- Encrypted data transmission (HTTPS)
- Secure cloud infrastructure (Convex)
- Access controls and authentication
- Regular security reviews

However, no system is 100% secure. If you discover a security vulnerability, please report it to hello@unformal.ai.

## Changes to This Policy

We may update this Privacy Policy from time to time. If we make significant changes, we will notify you via email or a prominent notice in the app. Continued use of Unformal after changes constitutes acceptance of the updated policy.

## Questions?

If you have questions about this Privacy Policy or how we handle your data, contact us at hello@unformal.ai.