Formulaic Privacy Notice by Mozilla

Updated 10 December 2025

The Formulaic Privacy Notice explains how Mozilla collects, processes, and protects personal information for users of Formulaic, its AI template and querying service, and clarifies data sharing with third-party LLM providers such as Google, Anyscale, and OpenAI. It is an official policy issued by Mozilla, a well-established open-source organisation, providing trusted guidance on user data rights, storage, deletion, and compliance with major privacy laws such as GDPR and CCPA.

[service name] Privacy Notice

Last Updated [date of last update]

This privacy notice applies to [service name], a service that allows users to query, create, share, and manage templates for querying artificial intelligence (AI) based large language models (LLMs) (the “Service”). The Service is owned, licensed, and operated by [organization name] (referred to herein as “we,” “us,” “our,” or “[company name]”).

This privacy notice explains what information [service name] collects, shares, and processes, and why. We also adhere to the [company name] Privacy Policy when we receive, handle, and share personal information. Your use of the Service constitutes your acceptance of this privacy notice, which incorporates by reference our Terms of Service.

Things you should know

We collect the following information directly from you when you use the Service:

Username: This is a unique, public-facing account name chosen by you. Any content that you choose to publish on the [service name] website or otherwise contribute to the Service will include this username. We use this username to attribute you with any content you contribute or publish when using the Service, as well as to enforce our Content Policies [link to content policies].

Account information: We may collect personal information, such as your name, username, contact information, and any other information that you provide to us in connection with the creation or administration of your account.

Formulas, Inputs and Outputs: There are currently no LLM or similar AI-based platforms operated by or affiliated with [company name]. However, the Service allows you to query selected LLMs offered by third parties (“Third-Party Models”) by inputting information into templates (“Formulas”) made available by the Service, as well as any Formulas that you yourself may choose to create and/or contribute to the Service. We process the content of your queries, as well as any amendments or updates you make to them, and any other content (including any media) you choose to upload to the Service (“Inputs”) in order to run them through Third-Party Models and generate results (“Outputs”). We also store Inputs and Outputs in your account, and you can choose to export your Outputs to your computer.

Documents: The Service allows you to upload documents that you can then run queries against using the Third-Party Models to create your own Formulas which you can also share with others via a direct link. You can also run queries on the documents using template Formulas. We will retain a copy of your document until you delete it. Deleting the document from a Formula does not delete your full Formula history. To delete not only the document, but your histories, you need to delete the Formula containing the document via your settings. After deletion in either instance, the document will no longer be available to any other users you have previously shared the Formula with.

Dashboard: The Service also allows you to save your favorite Formulas, draft Formulas, and any published Formulas that you yourself may contribute via a non-public dashboard. We use any data that you provide via the Dashboard to deliver and improve your experience of the Service.

Reports of violations: The Service allows you to report suspected violations of our Terms of Service and Content Policies, which are in turn reviewed by human moderators. If you contact us to Report a Violation, we will retain any personal information you may share with us for as long as we need to review, adjudicate, and resolve the case, or as otherwise required by law.

Communications: When you contact us in connection with the Service, we may also collect personal information, such as your username, name, email address, or phone number, as well as any other personal information you may provide to us.

We also automatically receive certain information when you interact with the Service:

Technical data: We receive basic telemetry data by default, which we use to improve the performance, stability, and security of the Service, including information about your device, including hardware configuration and device operating system; browser information, such as browser type and settings; log files and usage data; and event information, such as errors or crashes. We may also receive additional information about your device, such as country, language, operator and OEM, which we use to prevent fraud and abuse, enforce our terms, and improve the security of the Service.

Location data: Your IP address is temporarily collected as part of our server logs, and automatically deleted after 30 days. We use it to approximate your location to comply with relevant legal and regulatory requirements, as well as for fraud and abuse prevention purposes.

Interaction data: We receive aggregate data about visits to the [service name] website and other aggregate insights about user interactions with the Service. We use this data to better understand usage of the Service, as well as to add, improve, or remove certain features of the Service. We may also receive HTTP referral data to understand the website or domain that referred you to our site, which we only use for purposes of addressing bugs or other technical issues with our Service. We automatically delete this data after 30 days.

Metrics: We may also use cookies, device information, and IP addresses, along with clear GIFs, cookies, and third party services to securely operate the Service, help us understand how users engage with our Service, such as visits to our site and settings preferences, and provide additional functionality. We use:

Sign in with Google, which places a cookie on your device to assist with sign-in and authentication to the Service. When you sign in to the Service, you accept the associated Privacy Policy and Terms of Service from Google.

Google Analytics to obtain metrics on how users engage with our websites. This helps us to improve site content. For more information about how Google uses your personal information, please visit Google Analytics’ Privacy & Security. You can install the Google Analytics Opt-out Browser Add-on to prevent data collection about your visits to the Service and prohibit data transmission to Google Analytics.

We also receive the following information from third parties when you use the Service:

Account data: You need a Google Account in order to create an account and access the Service. When you log in with your Google Account to access the Service, we receive your name, email address, language preference, and profile picture from Google, and use this information to assist with your account administration and to contact you in relation to the Service, as well as to enforce our Terms of Service and Content Policies. Use of a Google Account is governed by Google's Privacy Policy and Terms of Service.

Fraud Prevention: We use third-party technology, Google’s Invisible reCAPTCHA, in the background of our website in order to identify fraudulent activity. Use of the Invisible reCAPTCHA is governed by Google's Privacy Policy and Terms of Service.

Model query data: When you use the Service to query Third-Party Models, we automatically receive a payload back that contains the contents of your query; information about the model queried (such as the name and version number); information about technical problems with processing the query, if any; the number of tokens required to process the query; and the model Outputs in response to the query. We do not store this data beyond temporarily caching it to process your query and return the Outputs to you.

Reports of violations: The Service also allows users to report suspected violations of our Content Policies, which are reviewed by human moderators. If we receive a report or complaint about any Formula(s) that you have published, we will retain any personal information shared with us in connection with that report or complaint for as long as we need to review, adjudicate, and resolve the case, or as otherwise required by law.

We may also use information about you to find and address violations of our Terms of Service or Content Policies; investigate suspicious activity; detect, prevent, and combat harmful or unlawful behavior; and otherwise maintain the integrity of our Service.

Information We Share

We use third parties to provide the Service to you, and have contracted with these companies requiring them to protect your information (Third-Party Services):

Google Cloud Provider: Google Cloud Provider (GCP) is a cloud-computing platform. We use GCP to facilitate account creation, authenticate users, host content, and provide access to certain Third-Party Models available through the Google Vertex service.

Anyscale: Anyscale is a cloud provider that offers scaled hosting and inference of open source LLMs. We use Anyscale to provide access to certain open source Third-Party Models via our Service.

OpenAI: OpenAI is an AI research and deployment company that offers certain LLMs for individual and enterprise use, APIs, and other services. We use OpenAI to provide access to certain Third-Party Models, including ChatGPT, via our Service.

Third-Party Services, including any Outputs generated by the use of Third-Party Services and Third-Party Models, are subject to their own terms, and we are not responsible for them.

Children

The Service is not directed to children under 18 years of age, and we do not knowingly collect or solicit personal information from children. If the Service unknowingly collects personal information from a child under the age of 18 without parental consent, we will delete that information as soon as possible, unless we have a legal obligation to keep it. If you are a parent or guardian and believe your child has uploaded personal information to our site without your consent, you may contact us as described in “How to Contact Us” below.

Account Information

If you would at any time like to review or change the information in your account or terminate your account with the Service, you can:

Contact us at [email address].

Log in to your account settings and update your user account.

Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. We may retain some information in our files to prevent fraud, assist with any investigations, enforce our legal terms, and/or comply with applicable recordkeeping and other legal requirements.

Note: Changing or terminating your account with the Service will not change or terminate your Google Account.

How to Contact Us

To make requests regarding your personal information, please contact us through our [contact form]. If you have any other questions regarding personal information or our privacy practices, please contact us at [email address]. We respond to all requests we receive from individuals wishing to exercise their rights in accordance with applicable laws.

Information for EU, EEA, Swiss, California, Connecticut, Virginia and Utah users

These regions have data protection laws that require us to specify the following:
Our Privacy Notice describes the purposes for which we process information about you and the categories of information we process. We do not sell personal data.

Our lawful bases for collecting and processing personal information include:

Performing our contract with you: Creating an account with the Service requires your agreement to the [service name] Terms of Service. To provide the services described, such as accessing Formulas and querying Third-Party Models, we need your account information, the content of your queries, and certain technical and interaction data, as further described in this Privacy Notice.

Legitimate interests: As described in this Privacy Notice, we also receive technical and interaction data of users, which may include IP addresses, and certain metrics to improve the security and reliability of our services, prevent fraud and abuse, log and address technical problems, and enforce our Terms of Service and Content Policies.

Consent: Where we ask for your consent to process your information, you can always withdraw this consent.

The following rights are granted by certain laws such as the General Data Protection Regulation (“GDPR”) in the EU and the California Consumer Privacy Act (“CCPA”) in California:

The right to know what personal data is collected

The right to know if personal data is being shared, and with whom

The right to access your personal data

The right to exercise your privacy rights without being discriminated against

In many cases, you can access, update, or delete your personal information directly from our product settings.

To make requests regarding your personal data, please contact us through our [contact form]. If you have any other questions regarding personal data or our privacy practices, please contact us at [specific email address], or you can contact our DPO by mail at:

[dpo company name]
[street address and number]
[postal code and city]
[country]

We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws. You also have the right to lodge a complaint with your local data protection authority.

About this template

What is this template?

Formulaic Privacy Notice by Mozilla is a free, ready-to-use Data Protection & Privacy template you can open, customize, and download on GitLaw. It gives you a professionally structured starting point, so you never have to draft from a blank page. The wording is plain and modern, organized into clear sections that are easy to read, edit, and adapt to your own situation before you share or sign it.

When should you use it?

Reach for this Data Protection & Privacy template whenever you need a reliable agreement quickly and want to be sure the essentials are covered. It suits individuals, freelancers, startups, and established businesses alike. Instead of paying for a document drafted from scratch, you can start here, tailor the details to your arrangement, and have a polished draft ready in minutes. This version is drafted with California (US) and European Union in mind, though you should always review the final wording against the laws that apply to you.

What's typically included?

A well-drafted Data Protection & Privacy usually sets out the parties involved, the scope of the agreement, and each side's rights and responsibilities. Expect sections covering key terms and definitions, how long the agreement lasts, how it can be ended, and what happens if something goes wrong. This template brings those building blocks together in a sensible order, so you can focus on the specifics rather than worrying about what to include. Open it to read the full document, then sign up to edit, negotiate, and e-sign it directly in GitLaw.

Jurisdiction
California (US)
European Union
Source
M
Formulaic Privacy Notice by Mozilla
from Mozilla
Document info
HTML document. Document created on Wed Dec 10th, 2025. Last updated on Wed Dec 10th, 2025.
This document is public
Licensed under CC BY-SA 4.0 (Attribution-ShareAlike).
Come to agreements faster
Write, review, negotiate, and manage legal contracts
Related documents
OLOpen Legal Library
Pocket Privacy Policy by Mozilla
OLOpen Legal Library
Employment Contract for Working Students (Bilingual, Informal Address) (Germany) by Seedsummit
OLOpen Legal Library
Consultancy Agreement (Denmark) by Seedsummit
OLOpen Legal Library
Personal Training Contract by EasyLegalDocs
OLOpen Legal Library
Letter to cancel goods or services bought at home or in a public place by Citizens Advice
OLOpen Legal Library
Letter to complain to a phone company about cashback by Citizens Advice