This explains what Forge keeps about you, where, why and for how long. [Legal name], [Address], [Country] (“we”) is the controller of this data. Questions or requests: support@getforge.dev.
What stays on your computer
The Forge app runs on your computer. These never leave it:
- your projects, and what Forge measures about them;
- findings, plans, conversations with the manager and their history;
- voice recordings: speech is turned into text on your computer and the audio is deleted.
What passes through our server, without being kept
When you run an AI job through your Forge account, each request to the AI model goes through our server to the AI provider, and the answer comes back the same way. A request contains the job’s instructions and the parts of your code the model asked to read. Before anything is sent, Forge on your computer removes secrets it recognises (API keys, tokens, private keys, passwords in connection strings), and never reads .env files, private keys or certificates. Our server doesn’t store requests. It keeps a model’s answer only while its job is running, so a request sent again after a dropped connection isn’t charged twice, and deletes it when the job ends (at the latest two hours after it started).
What our server keeps, and why
- Your account: email address, and your name if you sign in with GitHub. To provide the service you signed up for (contract).
- Sign-in sessions (when they started, your IP address and browser) and the computers signed in to your account (their name, operating system and when they were last used). To keep your account secure and let you sign computers out (contract and legitimate interest).
- Credits and usage: each credit added or used, and for each AI request the model, the number of tokens, what it cost and when. Not what was in it. To charge jobs correctly and answer billing questions (contract).
- Your plan, its status and Paddle’s references to your subscription and payments. To give you what you paid for (contract, legal obligation).
- Your review, if you write one: the rating, the text, and the name and role you chose. Once approved, these are shown on the website; your email never is. You can change or delete it at any time, and deleting your account deletes it (consent).
- A record of account events (signing in a computer, signing one out, credits added), for security and support (legitimate interest).
Who else receives data
- Paddle (Paddle.com Market Ltd, UK) sells our plans and credits as the Merchant of Record. Paddle collects your payment details, name, address and tax information under its own privacy notice; we don’t see or keep your card details.
- Anthropic and OpenAI (USA) run the AI model a job uses. They process requests under their API terms, which don’t use API data to train models. Requests to OpenAI are sent with storage switched off. We don’t use your code or requests to train any model.
- Resend (USA) sends our emails: sign-in links and messages about your account. It receives your email address and the message.
- Contabo (Germany) hosts our server and database.
- Hetzner (Germany) stores our encrypted backups. It can’t read them: they’re encrypted before they leave our server.
- Professional advisers and authorities, only when the law requires it.
Where data goes to a country outside the EU and UK without an adequacy decision, the transfer is covered by the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses. We don’t sell your data.
Cookies and visits
The website uses one cookie, to keep you signed in. There are no analytics or advertising cookies. Our own server counts page views, where visitors came from and downloads, without cookies: to count visitors it uses a code made from your IP address and browser that changes every day and can’t be traced back to you. IP addresses aren’t stored, and browsers that send Global Privacy Control aren’t counted. The checkout is Paddle’s, which uses its own cookies to process the payment and prevent fraud.
How long we keep it, and deleting it
We keep your account data while your account exists. You can delete your account on your account page at any time: that removes your account, its sessions, computers, credits, usage records and review from our server straight away. The record of account events keeps only that an account was deleted, not your email. Backups of the database are kept for 30 days, so deleted data is gone from them within 30 days. Paddle keeps payment records for as long as tax law requires.
Security
Everything between your computer, the website and our server is encrypted (HTTPS). The database isn’t reachable from the internet, access to the server is limited to us, and sign-in links work once, for 10 minutes.
Your rights
You can ask for a copy of your data, have it corrected or deleted, restrict or object to how it’s used, withdraw consent, or ask for it in a portable form: write to support@getforge.dev. We answer within one month. If you’re in the EU or UK, you can also complain to your data protection authority.
Children
Forge isn’t for anyone under 16.
Changes
If this changes in a way that matters, we’ll tell you by email before it applies.