TWOFORM legal

Privacy Policy

Version 1.0 · Effective July 18, 2026

This Privacy Policy explains how TWOFORM, operated by TWO Packaging (“TWOFORM,” “we,” “us”), handles information when you use our website, design studio, and packaging ordering service. It’s written to be read in plain English. By using TWOFORM you agree to this policy; if you don’t agree, please don’t use the service.

1. Information we collect

We collect only what we need to design your packaging, make it, and support you:

2. How we use your information

We use your information to:

3. AI processing of your designs

When you use AI features, the content needed to fulfill your request (such as your prompt, brand assets, and package specifications) is processed by us and by trusted third-party AI providers solely to generate, edit, and render your designs. We do not authorize these providers to use your brand assets to train their models for their own purposes where a business setting to prevent that is available to us, and we do not sell your content.

4. How we share information

We do not sell your personal information. We share it only as needed to run the service:

5. Cookies

We use cookies and similar technologies to keep you signed in, remember your preferences, secure the service, and measure usage. You can control cookies through your browser settings; disabling some cookies may affect how the studio works.

6. Data retention

We keep your information for as long as your account is active and as needed to provide the service, then for as long as reasonably necessary to meet legal, tax, accounting, and dispute-resolution obligations. You can delete your account from your dashboard; when you do, we remove your studio content (designs, dielines, references, brand kit, and uploaded assets) per that flow, while retaining order records and information we’re required to keep.

7. Security

We use reasonable technical and organizational measures to protect your information — including encryption in transit, access controls, and trusted infrastructure providers. No method of transmission or storage is perfectly secure, so we can’t guarantee absolute security, but we work to protect your data and to limit access to those who need it to run the service.

8. Your choices & rights

You can view and update your account details in your dashboard, delete your account, and opt out of non-essential messages. Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, or to object to or limit certain processing. To make a request, contact us — we’ll respond as required by applicable law and may need to verify your identity first.

9. Children

TWOFORM is a business tool intended for adults. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has given us information, contact us and we’ll delete it.

10. U.S. service & international users

TWOFORM is operated from the United States and your information is processed there. If you use the service from outside the U.S., you understand your information is transferred to and processed in the U.S., where privacy laws may differ from those in your country.

11. Changes to this policy

We may update this policy from time to time. When we make material changes, we’ll update the version and effective date above and, where appropriate, notify you. Your continued use of TWOFORM after an update means you accept the revised policy.

12. Contact us

Questions about your privacy or this policy? Contact us — the team reads every message. TWOFORM is operated by TWO Packaging in the United States.

← Back to your studio