Privacy Policy

In this Privacy Policy, Formula, we, us, and our means the operator of the Formula service and any affiliate, contractor, processor, browser runtime, orchestration worker, or service provider acting to operate the service on our behalf.

This Privacy Policy applies whenever you browse, search, sign in, save profile or address details, save or use supported payment setup, communicate with the agent, stage a cart, submit instructions, resume an order, or interact with any Formula support or action-required flow.

We may collect personal information you provide directly, including your name, email address, phone number, shipping and billing details, account credentials or linked sign-in details, referral code usage, cart selections, order instructions, merchant preferences, support requests, feedback, and any content you choose to send through chat or forms.

If you provide payment information or use supported payment setup, that information may be handled by payment, vault, or checkout service providers acting for Formula or the merchant. Formula may retain payment-related metadata such as token references, card brand, last four digits, expiration details, cardholder name, billing information, and checkout status, while CVV may be requested only for the immediate transaction step and not retained after that step where our flow says so.

When you use Formula, we may collect technical and usage information automatically, including IP address, coarse geolocation inferred from IP, browser and device type, operating system, app version, language, referral URL, timestamps, session identifiers, cookie or local-storage identifiers, pages or screens viewed, search activity, cart events, checkout attempts, error states, and interaction logs.

We may also collect diagnostic, performance, and anti-abuse information such as crash data, latency, retry history, fraud signals, and security-event logs so we can keep the service available, investigate failures, and protect Formula, merchants, and users from misuse.

We may receive personal information from third parties involved in the Formula shopping flow, including authentication providers such as Google when you choose federated sign-in, merchants and marketplaces that respond to search or checkout requests, payment or vault providers, shipping and tracking providers, identity or risk vendors, and customer-support tools used to operate the service.

That information may include account identifiers, order and fulfillment status, payment authorization outcomes, risk indicators, merchant-side restrictions, shipment events, and other records needed to authenticate you, route your checkout, recover interrupted workflows, or resolve disputes and support requests.

We use personal information to provide and operate Formula, including to authenticate users, maintain accounts, save profile and address details, support checkout setup, process chat requests, rank and normalize listings, personalize search and recommendations, stage carts, route orders, recover interrupted flows, retrieve order status, and provide customer support.

We also use personal information to secure the service, detect fraud and abuse, enforce our Terms and research-use restrictions, comply with legal obligations, maintain business records, analyze product quality and performance, improve merchant routing and reliability, and protect the rights, safety, and property of Formula, merchants, users, and third parties.

If you allow Formula AI, Formula sends your chat messages, formula or onboarding answers, attached image references, and relevant catalog listing context, such as product titles, merchant names, source links, prices, formats, and visible listing details, to Formula AI providers including Anthropic and OpenRouter-hosted Kimi models.

Formula uses those AI providers to generate chat responses, listing comparisons, and formula recommendations. Formula asks for permission in the app before sending that data to AI providers, and browsing catalog listings remains available without allowing AI processing.

Depending on the jurisdiction that applies, we process personal information on one or more of the following grounds: to perform a contract or take steps at your request before entering into a contract, to pursue legitimate interests in operating and improving Formula, to comply with legal obligations, to protect against fraud or misuse, and, where required, with your consent.

Where processing depends on consent, you may withdraw that consent for future processing to the extent required by applicable law, but doing so will not affect processing that was already lawful before withdrawal and may limit Formula features that depend on that consent.

Formula uses saved profile, address, payment setup, and order-instruction data to populate merchant forms, route supported checkout flows, submit requests to merchant systems, retry failed steps, request additional input such as CVV, 3DS, CAPTCHA, or final review acknowledgement, and retrieve order status where needed to complete the workflow you instructed.

When Formula acts through an electronic agent or other automated system on your instructions, records of the checkout attempt, merchant response, and related order events may be retained so we can prove instructions, investigate failures or disputes, provide support, comply with law, and maintain a reliable order history inside the service.

Messages you send to Formula, workflow state generated during your session, and support records may be stored and reviewed to respond to your requests, recover order flows, monitor quality, investigate misuse, train internal operational processes, and improve the usefulness and safety of the service.

Because Formula is designed to assist with research-oriented shopping and autonomous checkout, chat and workflow records may contain product interests, merchant preferences, shipping context, and order intent. You should not submit patient data, prescription information, or other unnecessary sensitive information through Formula.

Formula may use cookies, local storage, SDKs, secure device storage, and similar technologies to keep you signed in, remember preferences, preserve workflow state, prevent abuse, measure performance, and maintain the integrity of search, chat, and checkout flows across sessions and devices.

If you block or remove certain storage technologies, some Formula features may not work correctly, including account persistence, saved carts, workflow recovery, or security checks tied to an active session.

Formula uses automated systems to rank and normalize listings, personalize search and recommendations, detect fraud or abuse patterns, and carry out checkout actions you have instructed the service to perform. These systems help operate the product but do not independently make employment, insurance, housing, credit, or similarly regulated eligibility decisions about you.

Where risk, merchant requirements, or service design call for it, Formula may pause automation, require additional confirmation, request new input, or route a workflow to additional review before allowing the order process to continue.

We may disclose personal information to service providers and contractors that help operate Formula, including infrastructure hosts, authentication providers, AI model providers, payment or vault providers, analytics and diagnostics vendors, security and anti-fraud tools, communications providers, and support systems, but only as reasonably necessary for the purposes described in this Privacy Policy.

We may also disclose personal information to merchants, marketplaces, couriers, payment processors, identity or risk vendors, legal advisors, auditors, regulators, law enforcement, counterparties in a corporate transaction, and other parties when necessary to execute your instructions, comply with law, protect rights or safety, investigate fraud or abuse, or support a merger, acquisition, financing, or asset transfer involving Formula.

Formula, its service providers, and the merchants you interact with may process personal information in countries other than the one where you live. Those countries may have privacy and data-protection laws that differ from the laws of your home jurisdiction.

Where required by applicable law, we use contractual, organizational, and technical measures intended to support lawful cross-border transfers and to protect personal information when it is processed internationally.

We retain personal information for as long as reasonably necessary to provide Formula, maintain your account, preserve order and transaction history, support checkout recovery, resolve disputes, comply with tax, accounting, legal, and regulatory obligations, enforce our agreements, prevent fraud, and protect the security and integrity of the service.

Retention periods vary based on the type of information, the sensitivity of the data, whether the data is tied to an active account or unresolved order, and whether we have a legal, operational, or evidentiary need to keep it. Even after deletion requests or account closure, copies may remain in logs, backups, and records retained for lawful business purposes for a limited period.

Formula uses administrative, technical, and organizational measures intended to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. Those measures may include access controls, tokenization, encryption in transit, environment separation, logging, and risk-based monitoring.

No method of transmission over the internet or electronic storage is completely secure. You are responsible for protecting your credentials, devices, and inbox access, and for notifying Formula promptly if you believe your account or payment setup has been used without authorization.

Depending on applicable law, you may have the right to access, correct, update, delete, or export certain personal information, to object to or restrict certain processing, to withdraw consent where processing is based on consent, or to appeal a refusal to act on a privacy request. You may also be able to update some information directly through your Formula profile or settings surfaces.

To exercise privacy rights or make a privacy-related request, use the relevant Formula support or contact channel and provide enough information for us to verify your identity and understand the request. We may deny or limit a request where the law allows, including where we cannot verify identity, where the request affects another person’s rights, or where retention remains necessary for legal, security, or operational reasons.

Formula is designed for research-oriented catalog search and shopping assistance, not for clinical care, patient treatment, or consumer health management. You should not submit medical records, prescription details, patient identifiers, or other special-category or sensitive personal information unless Formula expressly asks for it for a lawful and clearly described purpose.

If you provide sensitive information that Formula does not need to operate the service, we may delete it, restrict its use, or decline to process the related request. Nothing in this Privacy Policy changes the research-use-only limitations and other restrictions described elsewhere in the Formula service.

Formula is not directed to children, and you must be at least 18 years old to use the service. We do not knowingly collect personal information from children in connection with the Formula shopping flow.

If you believe a child has provided personal information to Formula, contact us through the service so we can review the report and take appropriate action.

Formula may update, replace, supplement, or restate this Privacy Policy at any time for legal, regulatory, security, operational, commercial, or product reasons. Updated versions become effective on the stated effective date or, if no date is stated, when posted.

If we make a material change, we may provide additional notice in the service, by email, or by another reasonable method. Your continued use of Formula after the effective date of an updated Privacy Policy constitutes acknowledgement of the updated practices to the fullest extent permitted by applicable law.

Formula privacy questions, data-rights requests, and policy notices should be submitted through the support or contact route made available in the service. Merchant-specific product, fulfillment, or refund disputes may still need to be raised directly with the merchant responsible for the order.

When you contact Formula about privacy, include enough detail for us to identify your account, the jurisdiction you are writing from, the nature of your request, and any affected order or workflow so we can respond more efficiently.