Your space, explained.

FORMA keeps your shopping workspace private and links saved commerce records to your account when you sign in.

What we store.

A server-issued session cookie identifies your guest workspace. We store your cart, shopping preferences, conversation, workspace updates and quotes. Provisional selections are kept in this browser tab’s session storage, scoped to the confirmed guest workspace so they can survive a refresh.

Keep your brief focused.

Share furniture preferences, your budget and room requirements. Do not put passwords, payment details or private personal information into the Studio. Account and sandbox checkout forms collect your name, email, profile phone and delivery address separately. Your password is stored as a salted password hash. Stripe test checkout handles test payment details; FORMA does not store card credentials or reusable payment authorizations.

AI processing.

In live mode, the configured provider processes the shopping brief, relevant conversation context and grounded catalog facts. Replay mode uses deterministic fixtures. Provider credentials remain on the server and are never exposed to the browser. Account profiles, addresses and payment/order records are not available to AI tools.

Optional preference memory.

Preference memory is off until you enable it in Studio. With consent, FORMA automatically learns from your retained Studio chat history and new messages, saving one supported style, finish, material and room fact each, with its source and update date. Only your own messages are used, not the assistant’s suggestions. We do not retain budgets, sensitive traits or copied transcripts as memory. Relevant facts enter later Live AI context as optional preferences; your current instructions override them. FORMA does not train an external model on these facts. You can view the automatic summary in Studio and correct preferences by telling FORMA in chat. Disabling memory deletes its facts and stops future remembering and use. Your separate conversation and commerce records remain; turning memory on again can learn from that retained conversation. Guest facts expire with their guest; registration and eligible guest-work adoption carry only that guest’s consent and facts. Existing account preferences are never combined with a different guest’s memory.

Account and order email.

We use your account email for welcome, email verification, password recovery and order or payment updates. These are operational messages, and signing up does not subscribe you to a marketing list. Order email delivery records contain the order reference, message purpose and delivery status; card credentials stay out of email. Existing accounts and orders do not receive a historical notification backfill.

Optional stock alerts.

If you request a stock alert, we store your email address and chosen finish separately from your shopping session. An inbox confirmation activates one alert for up to 30 days. The email includes a cancellation route; no marketing list is created. Expired alerts are removed by the retention sweep. Email addresses and alert tokens are not sent to AI.

Guest scope and reset.

Workspace and quote access is restricted to the owning guest session. Sharing an Experience Lab scenario URL does not share your cart or conversation. Reset workspace clears this guest’s workspace, conversation, cart and saved quotes; it does not alter the catalog or other visitors. Guest sessions expire after 24 hours. An hourly purge removes expired unsigned guest records and their related workspace, conversation, cart and quote data. Customer login sessions also expire after 24 hours; customer carts, workspaces, profiles, addresses and immutable sandbox order/payment records remain linked to the account. Signing out revokes the current login session; password reset revokes every account session. Reset workspace does not erase account or order history. A hosted customer-data retention and deletion policy must be established before public use.