FORGEWAY

Privacy Policy

Last updated: June 7, 2026

1. Who We Are

ForgeWay LLC ("ForgeWay," "we," "us," or "our") is a Georgia limited liability company that operates the ForgeWay application at forgeway.app. ForgeWay provides AI-powered IT troubleshooting assistance through guided conversation. ForgeWay LLC is the data controller for your personal data.

For questions about this policy or your data, contact us at: support@forgeway.app

2. Information We Collect

Account Information

When you create an account, we collect your email address and authentication credentials. If you sign in with Google, we receive your email address and basic profile information from Google.

Conversation Data

We store the messages you send and the AI responses you receive. If you upload screenshots or images during a conversation, those images are stored in our cloud storage (Supabase Storage) and transmitted to Anthropic's API for AI vision processing. Anthropic does not use commercial API inputs or outputs for model training.

Device Profiles

You may voluntarily register your tech devices (computers, phones, routers, etc.) by entering device name, type, manufacturer, model, operating system, specifications, purchase year, and notes. This data is stored to provide context-aware troubleshooting assistance — the AI uses your device profiles to give you more accurate, device-specific guidance without having to ask what device you're using each time.

Usage Data

With your consent, we collect pseudonymized analytics data including pages visited, features used, and general interaction patterns via PostHog. This data is linked to your account ID for product improvement purposes. We also track your daily message count to enforce usage limits.

Device Information

We automatically collect basic device information such as browser type and operating system for analytics and debugging purposes. We do not collect precise geolocation data.

3. Cookies and Tracking

We use cookies and similar technologies for analytics purposes. On your first visit, we display a consent banner asking for your permission before setting any analytics cookies.

  • Essential cookies — Required for authentication and basic functionality. These do not require consent.
  • Analytics cookies (PostHog) — Used to understand how people use ForgeWay and improve the product. These are only set after you accept cookies via the consent banner. You can change your preference at any time by clearing your browser's localStorage.
  • Advertising cookies (Meta Pixel) — Used to measure the effectiveness of any future advertising campaigns. The Meta Pixel is only loaded after you accept cookies via the consent banner. It tracks page views and conversion events (signup, checkout). We also send server-side conversion events to Meta via the Conversions API using hashed identifiers.

4. How We Use Your Information

  • To provide and maintain the ForgeWay service
  • To process your conversations through our AI system and generate troubleshooting responses
  • To save your conversation history so you can return to previous sessions
  • To use your device profiles for context-aware AI responses
  • To enforce usage limits and manage your account tier
  • To analyze usage patterns and improve the product (with your consent)
  • To send you essential account-related communications (e.g., email confirmation)
  • To process payments and manage subscriptions

5. Third-Party Services

We use the following third-party services to operate ForgeWay:

  • Anthropic — AI model provider. Your conversation messages, uploaded images, and device profile data are sent to Anthropic's API to generate responses. Anthropic's commercial API terms state that API inputs and outputs are not used for model training. See Anthropic's privacy policy for details.
  • Supabase — Authentication and database hosting. Your account data, conversation history, device profiles, and uploaded images are stored in Supabase-managed PostgreSQL databases and cloud storage. Data is processed in the United States.
  • Vercel — Frontend hosting and deployment. Data is processed in the United States.
  • PostHog — Product analytics (with your consent). We collect pseudonymized usage data to understand how people use ForgeWay. PostHog processes data in the United States.
  • Stripe — Payment processing. If you subscribe to a paid plan or purchase top-up credits, Stripe processes your payment information. We do not store your credit card details.
  • Sentry — Error monitoring. We use Sentry to detect and diagnose software errors. When errors occur, Sentry may capture technical data including error details and browser information. Session replay data is collected with all text and inputs masked for privacy.
  • Meta (Facebook) — Advertising measurement (with your consent). We use the Meta Pixel and Conversions API to measure the effectiveness of advertising campaigns. When you accept cookies, the pixel tracks page views and conversion events. We also send hashed email addresses and internal user IDs to Meta via the server-side Conversions API for attribution. See Meta's privacy policy for details.
  • Resend — Email delivery. We use Resend to send transactional emails (account confirmation, password reset) and marketing emails (blog notifications, retention emails) with your consent.

We do not sell your personal information to any third party.

6. Data Retention

  • Account information — Retained as long as your account is active.
  • Conversation history — Free tier: retained for 7 days. Basic and Pro tiers: retained indefinitely unless you delete individual conversations or your account.
  • Device profiles — Retained until you delete them or your account.
  • Uploaded images — Stored in our cloud storage alongside conversation history. Deleted when the associated conversation is deleted or when your account is deleted.
  • Usage counters — Daily message counts are retained for 90 days, then purged.
  • Payment records — Webhook event records are retained for 120 days for chargeback dispute purposes, then purged. Stripe retains its own payment records per their retention policy.
  • Analytics data — Pseudonymized analytics data may be retained indefinitely.

7. Data Security

We use industry-standard security measures to protect your data, including encrypted connections (HTTPS/TLS), secure authentication via Supabase Auth, JWT token validation, and row-level security policies on our database to ensure users can only access their own data. However, no method of transmission or storage is 100% secure.

8. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and all associated data
  • Export your data in a portable format (JSON)
  • Withdraw consent for analytics cookies at any time
  • Object to processing of your data

You can exercise your data export and account deletion rights directly from your account menu in the app. For other requests, contact us at support@forgeway.app. We will respond to data rights requests within 30 days.

9. GDPR (European Users)

If you are in the European Economic Area (EEA), United Kingdom, or Switzerland, the following additional terms apply:

  • Legal basis for processing: We process your data based on: (a) contract performance (providing the service), (b) your consent (analytics cookies), and (c) legitimate interest (error monitoring, security, product improvement).
  • International transfers: Your data is processed in the United States through our service providers (Supabase, Anthropic, Vercel, PostHog, Stripe, Sentry). These transfers are covered by Standard Contractual Clauses (SCCs) and/or the EU-US Data Privacy Framework where applicable.
  • Right to complaint: You have the right to lodge a complaint with your local data protection supervisory authority.

10. CCPA (California Users)

If you are a California resident, the California Consumer Privacy Act (CCPA/CPRA) provides you with additional rights:

  • Right to know what personal information we collect, use, and disclose
  • Right to delete your personal information
  • Right to correct inaccurate personal information
  • Right to opt-out of the sale or sharing of personal information
  • Right to non-discrimination for exercising your privacy rights

We do not sell or share your personal information for cross-context behavioral advertising purposes. To exercise your rights, use the account menu in the app or contact us at support@forgeway.app.

11. Children's Privacy

ForgeWay is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us at the email address listed below.

Users between the ages of 13 and 18 should use ForgeWay only with the involvement of a parent or guardian.

12. AI-Generated Content

ForgeWay uses artificial intelligence (Anthropic's Claude) to generate troubleshooting advice. Your conversation messages, uploaded images, and device profile data are sent to Anthropic's API for processing. Anthropic's commercial API terms state that API inputs and outputs are not used for model training. AI responses may contain inaccuracies. We do not guarantee the accuracy, completeness, or reliability of any AI-generated content.

13. Changes to This Policy

We may update this privacy policy from time to time. We will notify registered users of material changes by email and by posting the updated policy on this page with a revised "Last updated" date. Your continued use of ForgeWay after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this privacy policy or your personal data, contact us at:

ForgeWay LLC
Email: support@forgeway.app