CoreForge Labs, Inc. ("CoreForge", "we", "us" or "our") operates the CoreForge platform and the websites at coreforgeapp.com and any sub-domains (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose and safeguard your information when you visit the Service or sign up for an account.
1. Information we collect
1.1 Information you provide
- Account data: name, work email, company name, company size and password.
- Billing data: billing address and payment method (processed by our PCI-DSS compliant payment processor — we never store full card numbers).
- Content data: any data you upload, configure or generate within the platform.
- Support & communication: messages you send us via forms, chat or email.
1.2 Information collected automatically
- Log data (IP address, browser, OS, referring URL, timestamps).
- Device identifiers and approximate geolocation.
- Cookies and similar technologies (see our Cookies Policy).
2. How we use your information
- To provide, operate and maintain the Service.
- To process transactions and send transactional notices.
- To improve, personalise and expand the Service, including security, fraud prevention and analytics.
- To communicate with you about updates, security alerts and product announcements. You can opt out of marketing emails at any time.
- To comply with legal obligations.
3. Legal bases for processing (GDPR)
Where the GDPR applies, we rely on the following legal bases: performance of a contract, our legitimate interests (e.g. securing and improving the Service), your consent (for marketing and non-essential cookies) and compliance with legal obligations.
4. Sharing your information
We do not sell your personal data. We share it only with:
- Service providers (sub-processors) who help us deliver the Service — cloud hosting, analytics, email delivery and payment processing — under strict data-protection agreements.
- Authorities when required by applicable law, valid legal process or to protect the rights, safety or property of CoreForge, our users or others.
- Business transfers in connection with a merger, acquisition or asset sale, with continued protection of your data.
5. International transfers
Your data may be processed in any country where we or our sub-processors operate. When transferring personal data outside the EEA or UK, we rely on adequacy decisions or Standard Contractual Clauses.
6. Data retention
We retain your data only for as long as needed to provide the Service and to meet our legal, regulatory and accounting obligations. When you delete your account, we delete or anonymise your data within 30 days, except where law requires us to retain it longer.
7. Your rights
Depending on your jurisdiction, you may have the right to access, rectify, erase, restrict, port or object to the processing of your personal data, and to lodge a complaint with a supervisory authority. To exercise any of these rights, email privacy@coreforgeapp.com.
8. Security
We implement administrative, technical and physical safeguards designed to protect your data, including encryption in transit and at rest, access controls, SSO/SCIM, audit logging and continuous monitoring. No method of transmission over the Internet is 100% secure.
9. Children
The Service is not directed to individuals under 16. We do not knowingly collect personal data from children.
10. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be notified by email or in-product notice prior to taking effect.
11. Contact
CoreForge Labs, Inc. — Data Protection Officer
Email: privacy@coreforgeapp.com