Privacy Policy

1. Data Controller & Contact Information

Data Controller: ForgeDocks
Privacy Contact: privacy@forgedocks.com
Data Protection Officer: dpo@forgedocks.com

For privacy requests (access, deletion, portability), email privacy@forgedocks.com. Response within 30 days.

2. Information We Collect

Account Information:

• Full name, email address, password (hashed)
• Account creation date, subscription plan

Billing Information:

• Billing email, billing address, payment method
• Invoice history, subscription status

Technical Data:

• IP address, browser type, device type
• Timezone, approximate geolocation (country-level only)

Data You Generate: Tool outputs and calculations are kept ONLY on your device. ForgeDocks does NOT collect, track, or access this data unless you explicitly export or share it.

3. Legal Basis for Processing (GDPR)

We process personal data based on:

• Account registration: Contractual necessity
• Billing: Contractual necessity + legal obligation (tax law)
• Customer support: Contractual necessity
• Security/fraud: Legitimate interest

You can withdraw consent for non-contractual processing anytime.

4. How We Use Your Data

Provide the Service: Create and manage accounts, process payments, deliver tools, provide customer support.

Improve the Service: Analyze anonymized usage patterns, debug issues, develop new features.

Communicate: Send billing invoices, notify of account changes, respond to support requests.

Comply with Law: Retain billing data for tax (7–10 years), respond to legal requests.

5. Data Retention

Account data: Active + 30 days after deletion
Billing/invoices: 7–10 years (tax requirement)
Support tickets: 3 years
Usage logs: 90 days

6. Data Sharing & Third Parties

We DO NOT Share For: Marketing to third parties, selling email lists, advertising targeting.

We MAY Share With:

• Payment Processors: Stripe (payment processing)
• Hosting: AWS (cloud infrastructure)
• Email: SendGrid (transactional emails)
• Legal Authorities: If legally required via warrant

7. Your Data Rights

Under GDPR and similar privacy laws, you have:

• Right of Access: Request a copy of data we hold
• Right to Correction: Request data correction
• Right to Erasure: Request data deletion
• Right to Restrict Processing: Limit how we use data
• Right to Portability: Request data in standard format
• Right to Object: Object to processing for marketing

To exercise rights, contact privacy@forgedocks.com. Response within 30 days.

8. Data Security

Encryption in transit: TLS 1.2+
Encryption at rest: AES-256 for sensitive data
Password security: Hashed, salted passwords
Regular audits: Annual penetration testing
Data minimization: Only collect essential data

9. Cookies & Tracking

We use essential cookies for login and session management. Tools use localStorage for your device only — this data is never synced to Forge servers. You control it entirely.

No cross-site tracking. We do not use cookies or pixels to track you across other websites.

10. International Data Transfers

If data transfers outside EEA (e.g., to US cloud hosting), we ensure safeguards via Standard Contractual Clauses (SCCs). We comply with GDPR and UK DPA 2018 for all transfers.

11. California Privacy Rights (CCPA)

California residents have additional rights:

• Right to Know: Request data we collect
• Right to Delete: Request data deletion
• Right to Opt-Out: Opt out of data selling
• Right to Non-Discrimination: No discrimination for exercising rights

To exercise CCPA rights, email privacy@forgedocks.com with “CCPA Request.” Response within 45 days.

12. Changes to This Policy

We may update this Privacy Policy anytime. Material changes communicated via email with 30 days’ notice.