Forge Privacy Notice

1. Summary

Forge stores the data you enter so that you can return to it. Everything you create is private to your account and is protected by row-level security in the database. Forge does not publish your sessions, does not sell your data, and does not use your content to train models.

2. What Forge stores

• Account data — your email address, an optional display name, and account timestamps.
• Feature intakes — every field you type on the Capture screen, including the domain prompt pack you choose.
• Artifact runs — generated artifacts plus the model, prompt version, schema version, status, latency, and any error code.
• Review history — your append-only comments, approvals, and change requests.
• Beta feedback — the category, rating, message, contact preference, and route context you submit.
• Email preferences — whether you receive Forge updates and product tips, how you were enrolled, and the disclosure version you saw.
• Operational records — AI request metadata used to enforce rate and capacity limits, and your acceptance of these legal documents.

3. AI processing

When you press Generate, the contents of that saved intake are sent from Forge's server to the AI provider that produces the artifacts. AI calls always run server-side; model credentials are never exposed to your browser. Forge logs only operational metadata about each request — never your intake text, prompts, or model output. Because feature intakes are sent to a third-party model provider, do not enter confidential, personal, customer, or production information into Forge during the beta.

4. Legal basis and purpose

Forge processes this data to provide the service you asked for, to keep your account secure, to enforce usage and capacity limits, and to improve the beta based on feedback you choose to send. Forge does not run advertising or profiling.

5. Access and sharing

Only you can read your sessions, runs, and review history; access is enforced per row at the database level. There is no public session-history endpoint, and anonymous visitors can never see stored user content. Data is shared only with the infrastructure and AI providers required to run Forge.

6. Retention and deletion

Your data is retained while your account exists. Deleting a session permanently removes that session, its artifact runs, and its review actions. Deleting your account permanently removes your profile, all sessions, all runs, all review actions, your beta feedback, your AI usage records, your email preferences, and your consent records. Deletion cannot be undone.

7. Email you receive from Forge

Forge sends essential account email for address confirmation and password resets. You cannot opt out of these while you hold an account. Account deletion is confirmed in the app, not by email. In addition, when you confirm your email address and accept these documents you are enrolled in Forge updates and product tips — occasional product email sent no more than once a month. This is disclosed at sign-up and in Settings. You can turn it off at any time in Settings, or with the one-click unsubscribe link in every such email; unsubscribing takes effect immediately and never affects essential account email. Forge does not sell or rent your email address, and does not send marketing on behalf of anyone else.

8. Your controls

• Download a machine-readable copy of your data from Settings at any time.
• Turn Forge updates and product tips on or off in Settings.
• Delete an individual session or your entire account from within the app.
• Reset your password by email from the sign-in screen.
• Ask a question or make a data request by emailing forge.productsupport@gmail.com.

9. Changes to this notice

This notice is versioned. When a new version is published you will be asked to review and accept it before continuing. The current version is forge-privacy-2026-02.