Privacy Policy

This Privacy Policy explains how Formed Supply, LLC. ("Formed Supply," "we," "us," or "our") collects, uses, discloses, and protects personal information when you use our website, quote forms, customer portals, and related services.

1. Information We Collect

• Contact and account details, including name, email address, phone number, company, and login data.
• Quote and order information, including product selections, quantities, addresses, shipping details, and communication history.
• Customer-service preferences and commercial interaction summaries, including your preferred language, what you requested, topics discussed, commitments, pending items, and follow-up dates. Where applicable, we also keep records of communication permissions, requests to stop contact, and the source of a summary.
• Uploaded files and documents such as artwork, logos, and invoice attachments.
• Technical and usage data such as IP address, browser/device information, and activity logs.
• Payment-related data processed by third-party payment providers (for example, Stripe). We do not store full payment card numbers.

2. How We Use Information

• Provide, operate, and improve our Services.
• Prepare quotes, process orders, fulfill shipments, and provide support.
• Authenticate users and secure accounts and systems.
• Send transactional updates and important service communications.
• Measure ad performance using CRM lead stages and customer outcomes.
• Detect, prevent, and investigate fraud, abuse, and security incidents.
• Comply with legal obligations and enforce agreements.

2A. AI-Assisted Customer Communications

Formed Supply uses artificial intelligence to assist with customer service, order intake, and operational follow-ups. You may interact with an automated assistant, including a synthetic AI voice where that channel is enabled. We identify automated voice assistants at the start of the interaction. You can request human assistance or contact hello@formedsupply.com instead.

For these purposes, authorized AI tools may process relevant contact details, language preferences, product and order information, and the content of your service interaction to answer a question or prepare a commercial summary. Summaries help our team remember what was requested and what remains pending. We limit access to information relevant to the authorized task; please do not provide medical information, passwords, or full payment-card details to an assistant.

Our current intended voice workflow retains commercial summaries in Formed Supply, rather than an audio-recording or full-transcript archive. Voice processing may still involve audio and text processing by the voice provider. Before any recording or other processing that requires consent, we will provide the required notice and obtain the required permission. A summary-only workflow is not an assurance that every provider has no temporary processing or retention; contact us with questions about a particular interaction.

This Policy does not itself authorize automated calls, marketing, or recording. We obtain any permissions required for the specific channel and purpose separately. Providing a phone number, placing an order, or choosing a contact method does not by itself grant blanket permission for AI voice calls or promotional communications. You may ask us to stop optional communications or change your contact preference. We may still send necessary service or legally required notices through an appropriate channel.

3. Cookies and Similar Technologies

We use essential cookies required for core site functionality. We also use optional analytics and marketing cookies only where consent is provided.

You can set or update your preference through our cookie banner and Cookie Preferences controls available on the website footer.

4. How We Share Information

• With service providers that support hosting, storage, analytics, communications, payment processing, and logistics.
• With AI and voice providers used in the relevant workflow, which may include xAI/Grok and Bland AI, to process selected business information for customer support and order intake. Supporting infrastructure includes services such as AWS, Vercel, and Supabase; email and payments may use Zoho ZeptoMail and Stripe. Provider processing, retention, and any independent uses depend on the applicable service, configuration, and agreements. We do not represent that all providers have identical data-use or retention terms.
• When enabled with applicable choices and permissions, advertising measurement with Meta can involve hashed email addresses or phone numbers, CRM stage events, and transaction measurement such as purchase amount and currency. Hashing does not make identifiers anonymous. We do not send call summaries, internal CRM notes, artwork, or full payment-card details for this purpose.
• With vendors and partners directly involved in production, delivery, or customer support workflows.
• When required by law, legal process, or to protect rights, safety, and security.
• In connection with business transactions such as mergers, acquisitions, or asset sales.

We do not sell personal information for monetary consideration. Advertising-related disclosures may nevertheless be considered a sale or sharing under some privacy laws. You can use Cookie Preferences for optional browser tracking and contact us to exercise applicable sale/sharing opt-out rights or ask about server-side advertising measurement. A cookie choice is not permission for automated calls.

5. Data Retention

We retain personal information for as long as reasonably necessary to provide Services, fulfill contractual obligations, comply with legal requirements, resolve disputes, and enforce our agreements.

Commercial call summaries and language preferences are retained for customer service and follow-up while relevant to that relationship. Security, consent, suppression, and transaction records may require different retention periods. Deletion requests are subject to applicable exceptions and do not necessarily remove records that we must retain to honor a request not to contact you.

6. Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. No system is completely secure, and we cannot guarantee absolute security.

7. Your Rights and Choices

Depending on your location, you may have rights to request access, correction, deletion, portability, or restriction of your personal information, subject to applicable law.

To submit a privacy request, contact us using the email listed below with enough detail for us to verify and process your request.

You may also ask for correction of an inaccurate interaction summary, human review, or a change in preferred language or contact channel. We will verify requests in a manner proportionate to the information involved. Where applicable, you may use an authorized agent, appeal a denied request, or opt out of targeted advertising or sale/sharing without unlawful discrimination. Do not email passwords, full card numbers, or medical records with a request.

8. Children and Sensitive Information

Our Services are intended for business users who are at least 18, and are not directed to children under 13. Our commercial customer-service tools are not designed to collect medical records or provide healthcare services. If you believe a child has provided personal information, or sensitive information was included in an interaction by mistake, contact us so we can review appropriate removal or restriction. We do not claim that this commercial workflow is a HIPAA-certified healthcare service.

9. International Visitors

If you access our Services from outside the United States, your information may be transferred to and processed in the United States or other jurisdictions where data protection laws may differ.

10. Policy Updates

We may revise this Privacy Policy at any time. Updates will be posted here with a revised "Last Updated" date.