Privacy Policy

Last updated July 26, 2026

1. Introduction

Humanform is an anthropometric predictions API and related tools operated for product design, sizing, ergonomics, and research. This Privacy Policy (the “Policy”) describes how we collect, use, and disclose your information when you access or use our website, dashboard, API, plugins, documentation, and related services (collectively, the “Services”), or otherwise interact with us. By using our Services, you agree to the collection, use, and disclosure of your information described here. If you do not understand or agree with this Policy, please do not use our Services.

If you have questions about this Policy or wish to exercise your applicable privacy rights, contact us at hello@fieldwork.design.

2. Changes to this Policy

We may update this Policy from time to time. If we do, we will publish an updated version here with an effective date. If we make material changes to how we use or disclose information, we will use reasonable efforts to notify you in accordance with applicable law.

3. Personal information we collect and how we use it

When you access or use our Services, we collect personal information about you from a variety of sources, as described below. In addition to the specific uses discussed below, we may use this information to provide and improve the Services, maintain our business relationship, enhance safety and security, provide customer support, comply with legal obligations, enforce applicable terms, prevent fraud or misuse, and protect our rights and those of our users and third parties.

What you provide us

We receive the following personal information that you provide us.

• Account information: When you create a dashboard account or request an API key, we collect your name, email address, authentication credentials, and related account details so we can provide and secure the Services.
• Billing information: If you purchase credits or paid plans, we (or our payment processor) collect billing and payment details needed to process transactions. Payment card data is typically handled by our payment processor and is not stored by us in full.
• Communications information: We collect your name, email address, and any other information you provide when you contact us (for example by email) so we can respond and support you.
• API and plugin usage inputs: When you call the API or use plugins (such as MCP, CLI, Sheets, or Excel), you may submit request parameters (for example age, percentile, gender, country, and measurement identifiers). These inputs are processed to return predictions and operate the Services. Do not submit information you are not authorized to process.

What we receive automatically

We and third parties may collect the following information when you use our Services, including via cookies or similar technologies. You may configure your browser to disable some cookies, which may affect how the Services work.

• Device information: Device type, unique identifiers, and internet protocol (IP) address.
• Location information: Approximate location derived from information such as IP address.
• Log data: Browser type and settings, timestamps, and how you interact with our website and dashboard.
• Usage data: Pages and features you access, API usage metrics (such as request volume and success/error status), and related activity needed to operate, bill, and improve the Services.

Your browser may allow you to transmit a “Do Not Track” or similar preference signal. Like many websites, our Services are not designed to respond to such signals unless required by law.

What we receive from third parties

We may receive personal information from third parties that help us operate the Services, including cloud hosting, authentication, analytics, security, and payment processors. We may also receive information that is publicly available.

4. How we disclose personal information

We may disclose personal information to the following third parties for the reasons listed below:

• Vendors or service providers: Third parties who help us provide the Services, including hosting, system administration, cloud storage, security, analytics, email, and payment processing.
• Professional advisors: Auditors, law firms, or accounting firms, where needed to comply with legal obligations or to protect and defend our rights.
• Business transactions: In connection with or in anticipation of an asset sale, merger, financing, or similar transaction.
• Government authorities or related third parties: Where required to comply with law, respond to lawful requests, enforce our terms, or protect the safety and security of our business, users, or the public.

5. How long we store personal information

We keep personal information for as long as reasonably necessary for the purposes explained in this Policy. Retention depends on factors such as whether we need the information to provide the Services, resolve disputes, comply with contractual or legal obligations, enforce our agreements, or protect our rights and the safety of our users. We also consider the nature of the information and the risk of harm if it were lost or misused.

6. How we protect personal information

We make reasonable efforts to protect your personal information from loss, misuse, or unauthorized access or disclosure, but we cannot guarantee perfect security. Please take care when disclosing information to us and protect your API keys and account credentials.

7. Your personal information rights

Depending on where you live, your legal rights over your data may include the right to:

• Access or know what personal information we have about you and how it is processed;
• Delete personal information that we hold about you;
• Update or correct inaccurate personal information that we hold about you;
• Transfer a copy of your personal information to a third party;
• Restrict, stop, or suspend our processing of your personal information;
• Object to our processing of your personal information;
• Withdraw your consent to our processing of your personal information, to the extent we rely on consent for such processing.

These rights are not absolute and we may decline your request where permitted by law. Email us at hello@fieldwork.design to exercise these rights. We will not discriminate against you for doing so. For your security, we may require you (or an authorized agent) to verify your identity before fulfilling a request.

8. Children’s privacy

Our Services are not intended for or directed at children under the age of 13, and we do not knowingly collect personal information about them. If you believe we have unknowingly collected such information, email us at hello@fieldwork.design, and we will make commercially reasonable efforts to delete it.

9. Third parties

We may provide links or integrations with third parties (for example documentation hosts, dashboards, or social platforms). If you choose to interact with those third parties, their privacy practices apply. We are not responsible for their privacy or security practices and recommend reviewing their policies.

10. Additional U.S. state disclosures

Some U.S. states, such as California, require additional disclosures about what personal information we collect and how we use or disclose it. For purposes of this section, personal information may also include “sensitive personal information” as defined under the California Consumer Privacy Act (“CCPA”).

Over the past 12 months, depending on how you use the Services, we may have collected and disclosed categories such as:

• Identifiers, such as name, email address, IP address, and device information;
• Customer records information, such as name and contact details;
• Internet or similar network activity, such as usage of our website, dashboard, and API;
• Geolocation data at a general level, such as approximate location from IP address;
• Commercial information related to purchases of credits or plans.

We use personal information for purposes including:

• To communicate with you;
• To provide, analyze, and improve our Services;
• To process payments and prevent fraud or illegal activity;
• To comply with legal or contractual obligations;
• To protect the safety and security of our Services, users, or the public.

We disclose personal information to service providers who help us operate the Services, and to governmental or regulatory bodies when required by law. We do not “sell” or “share” personal information as those terms are defined in the CCPA, nor do we have actual knowledge that we sell or share personal information of individuals under 16 years of age.

11. Data transfers

We may process information in the United Kingdom, the European Economic Area, the United States, or other countries where we or our service providers operate. If you use the Services from another country, your information may be transferred to, stored, and processed in countries that may have different data protection rules than your country of residence.

12. How can you contact us?

Please email us at hello@fieldwork.design if you have any questions or would like to exercise any of your rights as described in this Policy.