This Privacy Policy explains how Nexa Global Limited, a limited liability company registered in the Masdar City Free Zone, Abu Dhabi, United Arab Emirates (registration no. MC 14357), trading as Unformed ("Unformed", "we", "us", "our"), collects, uses, shares, and protects information when you use our website, applications, and services (the "Service").
Unformed is a business-to-business tool for professional installers and trades. It is not intended for consumers or for personal, household use.
Where we are the controller. For information about your own account and your use of the Service — your registration details, billing data, and usage telemetry — Unformed is the data controller.
Where we are a processor. When you, as an installer, upload photographs, property addresses, customer names and contact details, or other personal data relating to your clients, you remain the controller of that personal data and Unformed acts as your processor. You are responsible for having a lawful basis and any necessary notices or consents to upload that data and to have it processed by us and our sub-processors as described below. Our processing of that data on your behalf is also governed by the data-processing terms in our Terms of Service.
Account information. Your email address and any profile details you add — company name, contact name, phone number, business address, logo, region, and tax settings.
Project content. Photos and drawings you upload, renders generated on your behalf, customer names and addresses you add to projects, planning-review inputs, and any quote or invoice data you create.
Billing information. When paid plans are available, payments are processed by our payment provider (Stripe). We receive limited billing metadata (such as plan, status, and the last four digits of a card) but we do not store full card numbers.
Usage data. Standard telemetry — pages visited, features used, approximate location derived from IP address, browser version, and device type — used to operate and improve the Service and to keep it secure.
Where the UK GDPR or EU GDPR applies, we rely on: performance of a contract (to provide the Service to you); legitimate interests (to secure, operate, and improve the Service, and to communicate with you about it), balanced against your rights; consent (where required, for example certain communications, which you may withdraw at any time); and compliance with legal obligations.
To provide, secure, and improve the Service; to generate renders, brochures, quotes, invoices, and planning reviews you request; to communicate with you about your account; to process payments; to prevent fraud and abuse; and to meet our legal obligations. We do not sell your personal data, and we do not use your customer content to train AI models.
Renders and planning reviews are produced using third-party AI services, currently Google’s Gemini models, operating under their enterprise terms. Content you submit is sent to these services only to generate the output you request. We do not permit your content to be used to train those providers’ foundation models. AI output is illustrative only — see the Terms of Service for the limits of what renders and planning reviews represent.
We share data only with the service providers that power the Service, each acting as our sub-processor under a written agreement: Google Cloud (Firebase, Firestore, Cloud Storage, hosting and authentication), Google Gemini (AI rendering and analysis), and Stripe (payments, where applicable). We may also disclose information where required by law, to protect our rights or users, or in connection with a corporate transaction. We do not otherwise share your data with third parties for their own purposes.
Unformed is operated from the United Arab Emirates, and our providers process data in data centres that may be located in the United Kingdom, the European Union, the United States, and elsewhere. Where personal data protected by the UK GDPR or EU GDPR is transferred internationally, we rely on appropriate safeguards, such as the UK International Data Transfer Agreement or the European Commission's Standard Contractual Clauses, together with our providers' certified transfer mechanisms.
We keep your account and project data for as long as your account is active. You can delete your account at any time from inside the Service; deleted data is removed from active systems within 30 days, subject to limited retention required by law or for legitimate business records (for example, invoicing and tax records) and to routine backup cycles.
UK / EU. You have the right to access, correct, export (port), restrict, or delete your personal data, to object to certain processing, and to withdraw consent. You may also lodge a complaint with your supervisory authority — in the UK, the Information Commissioner's Office (ICO).
United States (California and similar states). Subject to applicable law, you have the right to know what personal information we collect, to request access or deletion, to correct inaccurate information, and to opt out of any "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined under the California Consumer Privacy Act (as amended by the CPRA), and we will not discriminate against you for exercising your rights.
How to exercise rights. Where we process your clients’ personal data on your behalf as a processor, please direct those individuals to you as controller; we will assist you in responding. For your own data, email hello@unformed.app and we will respond within the time required by applicable law (generally within 30 days).
Data is transmitted over TLS and stored encrypted at rest. We apply access controls and industry-standard safeguards, but no system is perfectly secure. If you suspect a security issue, contact us immediately at hello@unformed.app.
We use strictly necessary cookies for authentication and security only. We do not use advertising or third-party tracking cookies.
The Service is for business users aged 18 or over and is not directed to children. We do not knowingly collect personal data from children.
If we update this policy we will post the new version on this page and update the "Last updated" date. Material changes will be notified by email or in-product.
Nexa Global Limited (trading as Unformed), Smart Station, First Floor, Incubator Building, Masdar City, Abu Dhabi, United Arab Emirates. Questions about this policy or your data: hello@unformed.app.