Privacy Policy
Last updated:
This policy explains what information Formatto collects, how we use it, and the choices you have. Formatto is operated by Ryo Hoshi (星 良), a sole proprietor doing business as dazmocco, Japan (“we”, “us”). We handle personal information in accordance with the Act on the Protection of Personal Information of Japan and, where it applies, other privacy law.
1. Information we collect
- Account information. Your email address, name and organization name, and your sign-in credentials (passwords are stored only as hashes by our authentication provider).
- Airtable connection. The Airtable access token you provide, stored encrypted, and the identifiers of the bases, tables and fields you configure.
- Record data and generated documents. The contents of the Airtable records you choose to generate documents from, the templates and brand assets (logo, colours, fonts) you upload, and the PDF files the Service produces. These may contain personal information about your own customers or contacts; you decide what data you send to the Service.
- Billing information. Your plan, subscription status and invoices. Card details are collected and stored by Stripe, not by us.
- Usage and technical data. Generation logs (which template, when, how many pages, success or error), API key usage, and standard server logs such as IP address, browser type and request timestamps.
- Support correspondence. Emails you send us and our replies.
We use only the cookies strictly necessary to keep you signed in and to secure the Service. We do not currently use third-party advertising or analytics trackers.
2. How we use information
- to provide the Service: generate, store and deliver your documents;
- to operate your account, bill you and send service emails;
- to answer support requests;
- to secure the Service, prevent abuse and enforce plan limits;
- to improve the Service, using aggregated usage statistics;
- to comply with legal obligations.
We do not use the contents of your records or generated documents for any purpose other than providing the Service to you, and we do not use them to train machine-learning models.
3. Who we share information with
We do not sell personal information. We share it only with the providers below, who process it on our behalf under their own security and privacy commitments, and otherwise only when required by law or to protect our rights or the safety of others.
| Provider | Purpose |
|---|---|
| Airtable | Your data source. Accessed with the token you provide, only to read the records you select and write generated files back. |
| Supabase | Authentication and database (account, organization, templates, generation logs, encrypted Airtable token). |
| Cloudflare R2 | Storage of generated PDF files, served through time-limited signed URLs. |
| Stripe | Subscription billing. Stripe receives your card details directly; we store only Stripe customer and subscription identifiers. |
| Vercel | Hosting of the web application and API. |
| Resend | Sending transactional email, including documents you choose to email. |
4. International transfers
We are based in Japan, and our providers operate servers in the United States and other countries. Your information may therefore be stored and processed outside your country. We choose providers that offer appropriate security and contractual safeguards for such transfers.
5. Retention
- Account information, templates and generation logs are kept while your account is active.
- Generated PDF files are kept so that you can download them again, and are shared only through time-limited signed URLs.
- Your Airtable token is deleted when you disconnect Airtable or close your account.
- When you close your account, we delete your data within 30 days, except what we must keep for tax, accounting or legal reasons (for example, invoices) and copies in routine backups, which expire on their own schedule.
6. Security
Data is encrypted in transit. Airtable tokens are encrypted at rest, and database access is restricted per organization. Generated files are not publicly accessible. No system is perfectly secure; if we learn of a breach affecting your information, we will notify you as required by law.
7. Your rights and choices
You can view and change your account details in Settings, disconnect Airtable at any time, and cancel your subscription from Billing. You may ask us to access, correct, delete or export your personal information, or to stop using it, by emailing support@formatto.dev. We will respond within the time required by applicable law. For personal information about your own customers or contacts contained in your records, you are the controller and we act on your instructions; please direct their requests to us through your account.
8. Children
The Service is intended for businesses and is not directed to children under 16. We do not knowingly collect personal information from children; if you believe a child has provided it, contact us and we will delete it.
9. Changes to this policy
We may update this policy as the Service changes. For material changes we will notify you by email or in the Service before they take effect. The date at the top of this page shows when it was last updated.
10. Contact
Privacy questions and requests: support@formatto.dev (Weekdays 10:00–18:00 JST (UTC+9), email only). Our business details are on the Commercial Disclosure page, and the Terms of Service govern your use of the Service.