Skip to content
FormaBaseFormaBase home

Privacy Policy

Last updated: October 4, 2026

Draft for legal review. This document has not yet been reviewed by counsel.

Who we are

FormaBase is the business name of LOOP SC, LLC, a Florida limited liability company ("FormaBase," "we," "us," or "our"). FormaBase runs the commercial side of a portfolio of small software products: billing, attribution, payouts, and support. Creators build the products, Affiliates promote them, and customers subscribe to them.

This Privacy Policy explains how we handle personal information collected through our public website at formabase.app (the "Site"). It does not cover:

  • the participant portal used by Creators and Affiliates,

  • the individual software products and their customer accounts, or

  • information handled under a signed Creator Agreement or Affiliate Agreement.

Those have their own privacy notices or terms. If you have questions about any of them, contact us at support@formabase.app.

What we collect

We collect only what we need to run the Site and respond to you.

Information you give us

  • Creator and Affiliate interest forms. Your name, email address, whether you are interested as a Creator, an Affiliate, or both, and a short free-text description you choose to write, such as a product idea or how you would promote products.

  • Contact form. Your name, email address, the topic you pick, and your message.

  • Emails you send us. If you email us directly, we receive your email address and whatever you include in the message.

Please do not include sensitive personal information (such as health, financial account, or government ID details) or confidential business information in these forms. See our Website Terms of Use for more on idea submissions.

Information collected automatically

When you visit the Site, some information is collected automatically:

  • Server logs kept by our hosting provider, such as your IP address, the date and time of the request, the page requested, and your browser's user agent.

  • Error reports if something on the Site breaks, which can include technical details about your browser and the page you were on.

  • Product analytics about how the Site is used, such as pages viewed, device and browser type, approximate location (country or region) derived from your IP address, and the website that referred you.

We use privacy-friendly analytics settings. We do not use advertising cookies, and we do not build advertising profiles about you.

How we use your information

We use personal information to:

  • review interest forms and follow up with you about becoming a Creator or Affiliate,

  • answer your questions and messages,

  • operate, secure, and fix the Site, including detecting abuse and spam,

  • understand how people use the Site so we can improve it,

  • send you updates you asked for, such as news about the Creator or Affiliate programs (you can unsubscribe at any time using the link in the email or by writing to us),

  • comply with the law, enforce our terms, and protect our rights and the rights of others.

We do not use your information to make decisions that produce legal or similarly significant effects about you based solely on automated processing.

Legal bases for people in the EEA and UK

If you are in the European Economic Area or the United Kingdom, we rely on these legal bases:

  • Steps before a contract, when you submit an interest form and ask us to consider you for a Creator or Affiliate relationship.

  • Legitimate interests, to answer your messages, run and secure the Site, prevent abuse, and understand Site usage in a privacy-friendly way. We balance these interests against your rights, and you can object at any time.

  • Consent, where the law requires it, for example for certain cookies or for marketing emails. You can withdraw consent at any time without affecting earlier processing.

  • Legal obligation, when we must keep or disclose information to comply with the law.

How we share your information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

We share personal information only in these situations:

  • Service providers. We use trusted companies that process information on our behalf and under contract, only to provide services to us. Examples include:

    • Vercel (website hosting and server logs)

    • Neon (database hosting)

    • Resend (email delivery)

    • PostHog (product analytics)

    • Sentry (error monitoring)

    • Google Workspace (company email)

    Other providers support the portal and the products rather than this Site, such as Stripe (payments and payouts) and an identity verification provider for Creators (we expect to use Stripe Identity). Those are described in the notices for those services.

  • Legal and safety reasons. We may disclose information if we believe in good faith that it is required by law, court order, or other legal process, or that it is needed to protect the safety, rights, or property of FormaBase, our users, or the public.

  • Business transfers. If FormaBase is involved in a merger, acquisition, financing, reorganization, or sale of assets, personal information may be transferred as part of that deal. We will require the recipient to honor this Privacy Policy.

  • With your direction. We may share information when you ask us to.

Cookies and analytics

The Site may use cookies or similar browser storage (like local storage) for analytics and basic Site functions. We do not use advertising or cross-site tracking cookies.

You can control cookies in several ways:

  • Browser settings. Most browsers let you block or delete cookies. If you do, the Site should still work.

  • Global Privacy Control. We honor the Global Privacy Control (GPC) signal. If your browser sends it, we treat it as a request to opt out of any sale or sharing of your personal information and of non-essential analytics for that browser.

  • Do Not Track. Because there is no common standard for Do Not Track signals, we rely on GPC instead.

Where the law requires your consent before we place non-essential cookies, we will ask for it first.

How long we keep information

We keep personal information only as long as we need it for the purposes in this policy, then delete or anonymize it. As a general guide:

  • Interest form submissions: while we are considering your interest and for up to 24 months afterward, unless you become a Creator or Affiliate, in which case your information moves into the portal and is governed by your agreement.

  • Contact messages: for as long as needed to resolve your request and for up to 24 months afterward.

  • Server logs and error reports: for a short period set by our providers, typically 90 days or less.

  • Analytics data: in aggregated or pseudonymous form for up to 24 months.

We may keep information longer if the law requires it or to resolve disputes and enforce our terms.

Security

We use reasonable technical and organizational measures to protect personal information, such as encryption in transit, access controls, and limiting access to people who need it. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If you believe your information has been compromised, contact us right away.

Your rights

Rights for everyone

Wherever you live, you can ask us to:

  • tell you what personal information we have about you,

  • correct it if it is wrong,

  • delete it, and

  • stop sending you marketing emails.

US state privacy rights

Depending on where you live in the United States (for example California, Colorado, Connecticut, Virginia, Texas, Oregon, and other states with comprehensive privacy laws), you may have the right to:

  • know and access the personal information we collect about you, including the categories of information, sources, purposes, and the categories of recipients,

  • receive a copy in a portable format,

  • correct inaccurate information,

  • delete your information,

  • opt out of the sale of personal information, sharing for cross-context behavioral advertising, targeted advertising, and certain profiling (we do not do any of these), and

  • limit the use of sensitive personal information (we do not collect it through the Site).

California notice. In the past 12 months we have collected these categories of personal information through the Site: identifiers (such as name, email address, and IP address); internet or other electronic network activity (such as pages viewed and browser type); approximate geolocation; and the content of your messages and form submissions. We collect them from you and from your device, use them for the purposes described in "How we use your information," and disclose them to service providers for business purposes. We have not sold or shared personal information, and we have no actual knowledge of selling or sharing information of anyone under 16.

EEA and UK rights

If you are in the EEA or UK, you also have the right to restrict or object to our processing, to data portability, to withdraw consent, and to complain to your local data protection authority (in the UK, the Information Commissioner's Office). We would appreciate the chance to address your concern first.

How to exercise your rights

Email support@formabase.app with the subject line "Privacy request" and tell us what you would like us to do. We will need to verify your identity, usually by confirming you control the email address we have on file. You may use an authorized agent; we may ask for proof that the agent is authorized and confirm your identity directly with you.

We will respond within the time the law requires, generally within 30 days (EEA/UK) or 45 days (US states), and will tell you if we need more time.

Appeals

If we decline your request, you can appeal by replying to our decision or emailing support@formabase.app with the subject line "Privacy appeal." We will respond to your appeal in writing within the time required by law. If you are not satisfied, you may contact your state attorney general.

No discrimination

We will not deny you service, charge you a different price, or treat you differently for exercising your privacy rights.

International transfers

FormaBase is based in the United States, and we and our service providers store and process information in the United States. If you visit the Site from outside the US, your information will be transferred to the US, where privacy laws may differ from those in your country. When the law requires it, we rely on appropriate safeguards for these transfers, such as the European Commission's Standard Contractual Clauses and the UK's equivalent addendum, or on our providers' certifications under the EU-U.S. Data Privacy Framework.

Children

The Site is meant for adults. It is not directed to children under 16, and we do not knowingly collect personal information from them. Creators and Affiliates must be at least 18. If you believe a child has given us personal information, contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will change the "Last updated" date above. If we make material changes, we will give more notice, such as a notice on the Site or an email if we have your address. Please check back periodically.

Contact us

If you have questions or requests about this Privacy Policy, contact us at:

LOOP SC, LLC, doing business as FormaBase
Email: support@formabase.app
Mail: [Mailing address to be added]