Privacy Policy
Last updated: 17 June 2026
This policy explains what data FormicGuard collects, how we use it, who we share it with, and your rights. FormicGuard is operated by its owner, an individual based in the Republic of Korea. FormicGuard targets the Saudi Arabian market, so we aim to handle personal data consistently with Saudi Arabia's Personal Data Protection Law (PDPL).
1. What we collect
- Account data: your email address (and authentication details) when you sign up.
- Uploaded ad creatives: the ad images and any ad copy you submit for a scan.
- Review records: the results of your scans — verdicts, flagged issues, country, filenames, and timestamps — saved to your Ledger.
- Billing data: subscription status and identifiers needed to manage your plan. Card/payment details are handled by our payment provider, not stored by us.
2. How we use it
- To run AI compliance pre-checks and return results to you.
- To save your review records so you can revisit and export them.
- To operate your account, enforce plan limits, and provide support.
- To process your subscription and prevent abuse.
3. Third parties we share data with
We use a small number of trusted processors to run the service. We share only what each needs:
- Google (Gemini AI):your uploaded ad image (and any copy) is sent to Google's Gemini API to perform the analysis. This is essential to the core feature — the scan cannot run without it.
- Supabase: our database and authentication provider, where your account, review records, and related data are stored.
- Lemon Squeezy: our reseller and merchant of record, which handles checkout, billing, and subscription management.
- Resend: sends our transactional emails (for example, account confirmation and password reset).
- Vercel: hosts and serves the application.
- Cloudflare: provides DNS, CDN, and email routing.
These providers may process or store data outside Saudi Arabia, and each handles it under its own privacy terms.
4. Retention
Full-resolution uploaded images and zip files are processed in memory only for the duration of a scan, sent to the AI provider for analysis, and are not stored by FormicGuard — there is no object storage and nothing is written to disk.
For single (Lens) scans, a small low-resolution thumbnail (no larger than 256px) is retained alongside the saved result, tied to your account. For bulk (Matrix) scans, no image data is retained — only the result and the original filename are saved.
Saved records — verdicts, country, filenames, timestamps, and the Lens thumbnail — are kept until you delete your account, at which point they are removed, except for limited data we must retain for legal or billing reasons.
5. Deletion and your rights
Subject to applicable law (including PDPL), you may:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Request deletion of your account and associated data.
- Object to or restrict certain processing.
- Request a copy of your data where applicable.
To exercise any of these, contact us at support@formicguard.com. When you delete your account, we delete or anonymise your associated records except where we must keep limited data for legal or billing reasons.
6. Security
We use reputable infrastructure providers and access controls to protect your data. No system is perfectly secure, but we take reasonable steps to safeguard it.
7. Children
FormicGuard is a business tool and is not directed at children. We do not knowingly collect data from anyone under the age required by applicable law.
8. Changes
We may update this policy as the service and the law evolve. We will update the date above when we do.
9. Contact
For privacy questions or requests, contact support@formicguard.com.