Privacy Policy

This Privacy Policy applies to visitors to the Forge website, businesses using Forge, authorised users of Client accounts, and individuals who communicate with Forge. Forge provides business to business software services only. Forge does not provide services to consumers.

For personal data relating to website visitors, Forge account administrators, direct customers, and business contacts, Trusted Data Technologies Ltd acts as the data controller. Where Forge processes personal data submitted by a Client through the Forge platform, Forge may act as a data processor on behalf of that Client. Those processing activities are governed by the Forge Data Processing Addendum.

3.1 Account information

When you create an account, we may collect name, business email address, company name, job title, login credentials, account preferences, and billing information.

3.2 Business information

To provide Forge functionality, Clients may provide information such as company descriptions, brand information, positioning, audience information, marketing objectives, preferred tone of voice, and content preferences. This information is used to configure and provide the Services.

3.3 Content information

Forge may process prompts, instructions, uploaded materials, drafts, generated content, and publishing requests. The Client remains responsible for ensuring it has appropriate rights to provide such information.

3.4 Connected Platform information

If you connect third party platforms, Forge may process information necessary to provide the integration, including account identifiers, authentication tokens, publishing permissions, platform responses, and publishing status information. Forge does not control the privacy practices of third party platforms. You should review their own privacy policies.

3.5 Technical information

We may automatically collect technical information including IP address, browser type, device information, operating system, usage logs, security information, and diagnostic information.

3.6 Payment information

Payments are processed through third party payment providers. Forge may receive limited payment related information such as transaction confirmation, payment status, purchase history, and billing records. Forge does not store full payment card details.

4.1 Provide Forge

We use data for creating accounts, authenticating users, providing functionality, generating content, processing publishing requests, and providing support.

4.2 Maintain and improve Forge

We use data to improve reliability, fix errors, develop features, monitor performance, and improve security.

4.3 Protect Forge

We use data for preventing fraud, detecting abuse, enforcing our Terms, protecting users, and investigating security issues.

4.4 Communicate with you

We use data for service updates, security notifications, billing communications, support responses, and important legal notices.

4.5 Comply with legal obligations

We use data for regulatory requirements, accounting obligations, legal claims, and law enforcement requests where legally required.

5.1 Contract

We process information necessary to provide Forge, manage accounts, and deliver purchased services.

5.2 Legitimate interests

We may process information where necessary for legitimate business purposes, including improving services, preventing misuse, maintaining security, and operating our business.

5.3 Legal obligations

We process information where required by law.

5.4 Consent

Where required, we will request consent before processing. You may withdraw consent where processing relies on consent.

6.1 AI generated content

AI generated content may be produced based on Client instructions, business information, user preferences, and other information provided through Forge. Users remain responsible for reviewing and approving generated content.

6.2 AI improvement

Forge may use aggregated and anonymised information derived from use of the Services to improve performance, enhance functionality, improve reliability, and develop Forge. Forge does not use identifiable personal data, Client confidential information, or private business configuration information to train general purpose models.

7.1 Service providers

We use trusted providers that support Forge, including providers of cloud infrastructure, hosting, analytics, authentication, communications, payment processing, and AI technology services. These providers process information only as necessary to provide their services.

7.2 Connected Platforms

Where authorised by you, Forge may share information with Connected Platforms to perform requested actions.

7.3 Legal requirements

We may disclose information where required by law, by regulators, by courts, or to protect legal rights.

Some service providers may process information outside the United Kingdom. Where personal data is transferred internationally, Forge uses appropriate safeguards, which may include adequacy decisions, standard contractual clauses, international transfer agreements, or other lawful mechanisms.

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy. Retention periods depend on the nature of the information, the purpose of processing, legal requirements, and business needs. When information is no longer required, we will securely delete or anonymise it.

We use reasonable technical and organisational measures designed to protect personal information, including access controls, authentication measures, monitoring, and secure infrastructure practices. However, no online service can guarantee absolute security. Users are responsible for protecting account credentials.

Forge may use cookies and similar technologies to operate the website, remember preferences, understand usage, improve performance, and maintain security. Where required, we will request consent before placing non essential cookies.

Depending on applicable law, you may have rights including access to your personal data, correction of inaccurate information, deletion, restriction of processing, objection to processing, and data portability. Requests can be submitted using the contact details below.

Where a Client uses Forge and submits personal data relating to its own customers, employees or contacts: the Client is responsible for ensuring lawful collection, providing privacy notices, obtaining required permissions, and responding to individual requests. Forge processes such information only as instructed by the Client.

Forge may contain links or integrations with third party services. Forge is not responsible for third party websites, third party privacy practices, or third party security measures. You should review applicable third party privacy notices.

We may update this Privacy Policy from time to time. Where changes are material, we may provide notice through email, the Forge platform, or website notices. The latest version will always display the updated date.

If you have concerns about our handling of personal data, please contact us first. You also have the right to complain to the UK supervisory authority: Information Commissioner's Office (ICO).

For privacy related enquiries, contact Trusted Data Technologies Ltd, Grosvenor House, 11 St. Pauls Square, Birmingham B3 1RB, United Kingdom. Email: [email protected].