Updated 18 September 2026. ProximaForma at proximaforma.com is operated by Agentikus LTD. For privacy requests, contact support@proximaforma.com.
Information we store
We store your account name and email, short-lived sign-in-code hashes, project memberships, designs, uploaded references, comments, activity, agent conversations, generated images, and usage and billing records. Accounts created under an earlier release may retain unused legacy password and recovery-code hashes until the account signs in by email or is deleted. Dedicated directory review accounts retain password hashes for reviewer sign-in. We use this information to provide your workspace, control access, meter paid features, and investigate service problems.
Hosting and service providers
The hosted service uses Amazon Web Services in Frankfurt, Germany for its application database and object storage. Content is delivered through a global content delivery network. AWS also processes operational logs, backups, and verification emails. Support messages are handled through Microsoft 365. Payments are processed by Stripe; we retain payment references and credit records, while payment-card details are handled by Stripe.
AI conversations and project images
When you use Forma, your messages and the canvas information its tools read are sent to OpenAI for text or voice generation. A voice conversation sends microphone audio while the call is active. We save conversation text, but do not save audio recordings. Uploaded images and images retained from earlier releases are stored with your workspace. OpenAI processes conversation requests under its applicable service terms and data policies.
Connected apps and agents
A connected agent can read or change only the canvases and actions allowed by your connection and account membership. Information it reads is shared with the service operating that agent. When you consent to an email identity scope, we share your verified email address with the connected app, including for enterprise email-domain restrictions. Verification requires a code sent to your email; an account profile alone does not establish ownership.
You can inspect and revoke agent access in Connect agent. OAuth access tokens expire after one hour; new connections renew automatically until you revoke access. Revocation prevents further access, but does not erase information already received by another service.
Browser storage and credentials
An HTTP-only session cookie keeps you signed in for up to seven days. Browser storage remembers workspace preferences. Sign-in codes, session tokens, invitation tokens, and API keys are stored as hashes. Sign-in codes expire after ten minutes, work once, and permit at most five attempts. Design exports do not include agent credentials.
Google Ads and Google Analytics load only after you choose Allow measurement in our cookie banner. Google Ads uses advertising cookies to measure which ads lead to completed account signups. The signup event includes a random event ID to prevent duplicate conversions and a nominal value of EUR 1, which is not revenue. We do not send your name or email address in this event. Google Analytics uses analytics cookies to measure visits and usage across our website and app. It also records when a visitor opens registration or requests a signup code, completes signup, creates or opens a project, starts a text design request accepted by the server, creates a comment, or exports an SVG. These events include only fixed action names and, where relevant, a template, input method, or export format. We do not send names, email addresses, project IDs, comment text, or design prompts with these events. Personalized advertising and Google signals remain disabled.
OpenAI Ads loads only after measurement consent. It measures completed signups, the first saved non-empty design, and confirmed credit purchases. We send opaque event IDs and, when available, OpenAI click and browser references; purchase events include the confirmed amount and currency. We do not send design content, prompts, documents, names, or email addresses. Click references last up to 30 days and the Pixel browser reference up to 365 days. Withdrawing consent stops future delivery and removes pending attribution references. We request a new choice when adding OpenAI measurement. Payments currently buy prepaid credit, not recurring subscriptions.
Browser storage remembers your consent choice and, after consent, signup receipts to avoid reporting the same signup again. Use Cookie settings below to allow or reject optional measurement at any time. Rejecting optional measurement keeps the Google tag from loading on future visits and stops further signup events and Analytics collection on the current page. An earlier Ads-only opt-in does not enable Analytics; we ask for a new choice. Learn how Google uses information at Google’s partner sites policy.
External resources
Linked images and fonts may be requested from their original providers. Those providers receive normal request information, such as your IP address. An exported SVG can retain external image links.
Retention and deletion
Workspace data is retained while you use the service, unless you remove it or request deletion. Deleting a canvas removes it from the workspace and schedules cleanup of its related database records. Immutable files and older object versions can remain in storage until separate cleanup; contact us for a complete deletion request. Operational logs and scheduled database backups have a fourteen-day retention period. Billing and transaction records are retained separately where needed for accounting and resolving payment issues.
Your choices and requests
You can export designs as JSON or SVG, delete canvases, and revoke connected agents. Contact support@proximaforma.com to request access, correction, or deletion of account data, or to ask about retention. We may need to verify your identity before acting on an account request.
Self-hosted installations
If you run the software yourself, its operator controls storage, backups, and connected providers. The local default uses a SQLite database in the installation’s data directory. This page describes the service at proximaforma.com.
Contact support