Privacy Policy

We collect information in three ways: directly from you, automatically through your use of ForgeSpacer, and from third-party integrations you explicitly enable.

A. Information You Provide Directly

• Account Information: Name, email address, password hash, organization name, job role, and profile preferences when you register.
• Workspace Content: Product requirement documents (PRDs), feature requests, prompt inputs, sprint backlogs, notes, and user stories created within the platform.
• Billing Information: Credit card details, billing address, and transaction history (processed securely via our payment processor; we do not store full credit card numbers).
• Communications: Support tickets, feedback submissions, and direct email inquiries sent to our team.

B. Information Collected Automatically

• Usage Data: Pages visited, features utilized, document generation timestamps, prompt counts, and interaction logs.
• Device & Log Data: IP address, browser type, operating system, referring URLs, and hardware configuration.

We use your information strictly to operate, improve, and protect our platform. Specifically, we process data to:

• Provide, maintain, and personalize the ForgeSpacer workspace experience.
• Process AI generation requests and render structured PRDs, sprint backlogs, and roadmaps.
• Authenticate users, prevent fraud, and enforce security controls.
• Process billing transactions and issue invoices.
• Respond to support requests and send essential system notifications (e.g. security alerts, policy changes).
• Analyze aggregate platform usage metrics to enhance performance and UX.

Security is core to our infrastructure. All data in transit between your device and ForgeSpacer is encrypted using TLS 1.3 protocol. Data at rest is encrypted using AES-256 standards.

Our databases are hosted in SOC 2 Type II certified cloud environments with isolated database instances, regular automated backups, and strict role-based access control (RBAC).

ForgeSpacer integrates with vetted third-party service providers to deliver core functionalities:

• AI Model Vendors: Enterprise APIs (such as OpenAI and Anthropic) with strict zero-data-retention agreements for API calls.
• Cloud Infrastructure: AWS and Vercel for web application hosting and global CDN delivery.
• Payment Processing: Stripe for secure PCI-DSS compliant billing.
• Integration Endpoints: Jira, GitHub, Linear, and Slack (only accessed when authorized by workspace admins).

We use essential cookies to maintain user session state, remember user preferences, and securely authenticate logins. We do not use intrusive third-party advertising cookies or cross-site tracking scripts.

Depending on your jurisdiction (including GDPR and CCPA rights), you have the right to:

• Access & Export: Request a copy of your personal data and workspace content in standard JSON/Markdown formats.
• Rectification: Correct inaccurate profile or workspace information via your account settings.
• Deletion: Request complete deletion of your account and all associated workspace documents.
• Opt-Out: Unsubscribe from marketing email communications at any time via the link in the email footer.

We retain your account data and workspace documents as long as your account remains active. Upon account termination or explicit deletion request, customer data is permanently removed from active production databases within 30 days.

We may update this Privacy Policy periodically to reflect technological or legal updates. Material changes will be communicated via email or through prominent notifications within the ForgeSpacer application at least 14 days before taking effect.

If you have questions, concerns, or data privacy requests, please reach out to our data privacy officer: