Privacy Policy

Effective October 11 2026

This Privacy Policy explains how Garick Rodriguez ("we", "us") collects, uses and protects personal information when you use SpecForma at https://specforma.garickr.com (the "Service"). It forms part of our Terms of Service. If you have questions, contact us at garickr@icloud.com.

1. Information we collect

Account information. Your name, email address and password. We store passwords only as a salted, one-way hash, never in readable form. We also record when you signed up, accepted our Terms, confirmed your email, and your plan, trial and subscription status.

Your content. The documents you upload, and the settings, profiles, templates and logos you save, so that we can process them and give you the results.

Billing information. Payments are handled by Stripe. Stripe collects your card or payment details; we do not receive or store full card numbers. From Stripe we receive a customer reference, your subscription plan and status, and renewal dates.

Technical information. When you use the Service, our hosting provider's systems record standard technical data such as your IP address, browser type, the pages and features requested, and the date and time. We use this to operate, secure and troubleshoot the Service and to prevent abuse (for example, to limit repeated sign-in attempts).

Communications. If you email us, we keep the correspondence.

2. Cookies and similar technology

We use one essential cookie to keep you signed in. It is required for the Service to work and is not used for advertising or tracking. Your browser's local storage also keeps a few preferences on your own device, such as your preferred export format. We do not use advertising or third-party analytics cookies.

3. How we use information

We use personal information to: provide and operate the Service and process your documents; create and secure your account; manage trials, subscriptions and payments; send service emails (such as confirming your email address, resetting your password and telling you about important changes; Stripe sends payment receipts); provide support; prevent fraud, abuse and security incidents; comply with legal obligations; and improve the Service. We do not use the content of your documents for any purpose other than providing the Service to you, and we do not sell personal information or share it for targeted advertising.

Where the law requires a legal basis (for example in the EU or UK), we rely on performing our contract with you, our legitimate interests in running and securing the Service, compliance with legal obligations, and your consent where we ask for it.

4. How we share information

We share personal information only as follows:

• Service providers who process it for us under contract: hosting and storage (Render), payment processing (Stripe), and email delivery (our email provider). They may use it only to provide their services to us.
• Legal reasons: when we believe in good faith that disclosure is required by law, subpoena or other legal process, or is necessary to protect the rights, property or safety of us, our users or others.
• Business transfers: in connection with a merger, acquisition, financing or sale of all or part of our business, subject to this Policy.
• With your consent or at your direction.

5. Retention

We keep information only as long as needed for the purposes above. Specifically: page previews are deleted after about 2 days; uploaded copies of documents and exported files are deleted after about 30 days; your saved settings, profiles, templates and logos, and your account information, are kept while your account exists. After your account is closed, we delete or anonymize your information within a reasonable time, except where we must keep it (for example, billing records for tax and accounting). Our hosting provider keeps backups for a limited time, after which deleted information is removed from them.

6. Security

We use reasonable technical and organizational measures to protect information, including encrypted connections (HTTPS), hashed passwords, private per-account storage, and limited access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please use a strong password and keep it confidential.

7. Where information is processed

The Service is operated from the United States, and our service providers may process information in the United States and other countries. If you use the Service from outside the United States, you understand that your information will be transferred to and processed there, where data protection laws may differ from those in your country. Where required, we rely on appropriate safeguards for such transfers.

8. Your choices and rights

You can change your password in your account, and manage or cancel your subscription from the Billing page. Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. To make a request, email garickr@icloud.com from the address on your account. We will verify the request and respond as required by law. We will not discriminate against you for exercising your rights. You may also have the right to complain to a data protection authority.

California residents: we do not sell personal information and do not share it for cross-context behavioral advertising. The categories of information we collect and how we use and disclose them are described above.

9. Children

The Service is not intended for anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.

10. Changes to this Policy

We may update this Policy from time to time. We will post the new version here with a new effective date and, for material changes, notify you by email or on the Service.

11. Contact

Garick Rodriguez · garickr@icloud.com