Privacy Policy

Forge is a small-business operations platform (finance, legal documents, marketing). For the data you upload about your own customers and contacts, you are the data controller and Forge acts as your processor: we only process that data to provide the Service to you.

Account data: name, email address, phone number (if provided), password hash, and authentication metadata.

Business profile: business name, industry, type, size, address and location, website, year founded, revenue range, goals, and target audience — used to tailor budgets, news, and recommendations.

Financial data: uploaded expense and revenue files, extracted transactions, categories, amounts, dates, and computed metrics and budgets.

Contacts: names, email addresses, phone numbers, companies, notes, and group membership for people you import or add.

Marketing activity: campaign drafts, subjects, content, send status, per-recipient delivery results, bounces, complaints, and unsubscribes.

Legal and calendar data: generated documents, templates, and calendar events you create.

Operational logs: request identifiers, timestamps, feature used, rate-limit and quota counters, and error events. These are kept for security and abuse investigation and deliberately exclude the content of your files and messages.

To operate the features you use, to keep your account secure, to enforce usage limits and prevent abuse, to deliver email you choose to send, and to meet legal obligations. We do not sell your data, and we do not use your business data or contacts to advertise to you or to anyone else.

We share the minimum necessary with service providers that run parts of the platform: our hosting and database provider, our AI provider (which receives the prompt content needed to generate budgets, documents, and marketing copy), our email delivery provider, mapping and location search, news, and web data providers. These providers process data on our instructions and are not permitted to use it for their own purposes. We may also disclose data where legally required.

When you generate a budget, document, campaign, or analysis, the relevant inputs — such as your business profile and financial figures — are sent to our AI provider to produce that output. Do not paste information into Forge that you are not permitted to share with a third-party processor.

You are responsible for having a lawful basis to email the contacts you import. Forge maintains a suppression list per account: recipients who unsubscribe, hard-bounce, or file a complaint are automatically excluded from future sends and cannot be re-added by re-importing a list.

Data is encrypted in transit and at rest by our infrastructure provider. Every table enforces row-level security so records are readable only by the account that owns them. Secrets and API keys are stored in an encrypted secret store, never in application code. Access to production data is limited to what is required to operate and support the Service.

We keep your data for as long as your account is active. Deleting a record in the app removes it from your account immediately. Deleting your account removes your profile, business, financial, contact, campaign, document, and calendar records. Suppression entries and minimal audit and security logs are retained after deletion where necessary to honour unsubscribe requests and to investigate abuse. Backups are retained on a rolling schedule and age out automatically.

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, to object to or restrict processing, and to complain to a supervisory authority. Most of this can be done directly in Settings; for anything else, email us and we will respond within 30 days.

Our providers may process and store data in the United States and other countries. Where required, these transfers rely on standard contractual clauses or an equivalent safeguard.

Forge is for business use and is not directed to anyone under 18. We do not knowingly collect data from children.

We may update this policy; material changes will be reflected in the date above. Contact forge1939@gmail.com with any privacy question, access request, or deletion request.