Privacy Policy

1. Who This Policy Covers

1.1. This Policy covers our relationship with you, our customer. It does not cover the applications you build using the Service. If you build an application that collects personal information from its own end-users, you — not Forjado — are responsible for that application's privacy practices and for providing any privacy policy those end-users are entitled to. See Section 8.

1.2. The Service is offered only to users located in the United States and only to users who are at least 18 years old. We do not knowingly collect information from anyone under 18.

2. Information We Collect

2.1. Information you provide:

• Account information, including your email address;
• The content of your prompts and the specifications ("Specs") you approve;
• The application code generated for you through the Service and your iteration history.

2.2. Information we collect automatically:

• Operational telemetry about your use of the Service, such as which features are used, where builds succeed or fail, and performance data;
• Technical information such as IP address, device and browser information, and log data;
• Security and access logs.

3. How We Use Information

3.1. We use the information we collect to:

• Provide, operate, and maintain the Service, including generating and hosting your applications;
• Authenticate you and secure your account;
• Communicate with you about the Service;
• Improve the Service, as described in Section 4;
• Comply with law and enforce our Terms.

4. How We Learn From Your Data

4.1. Forjado uses customer data — including operational telemetry, the content of your prompts, and generated code — to operate and improve the Service.

4.2. Our commitment. We never expose your prompts, Specs, or code to other customers, and we never use your prompts, Specs, or code to build a competing product for anyone else. This commitment is stated identically in our Terms of Service.

4.3. When you leave. If you stop using the Service, we stop ingesting new signal from your activity to improve the Service going forward. Improvements already incorporated into the Service before that point cannot be reversed or extracted. We retain a copy of your most recently stamped code for support and legal-defense purposes, quarantined from the systems that learn from customer activity, as described in our Terms of Service.

5. How We Share Information

5.1. We do not sell your personal information.

5.2. Service providers (sub-processors). We share information with a small number of providers who process it on our behalf to run the Service:

• Fly.io — infrastructure and application hosting;
• Supabase — database and authentication; stores primary customer account information;
• Cloudflare — domain, network protection, and rate limiting;
• Resend — email delivery.

5.3. Model providers. To generate your applications, the content of your prompts and related code is sent to our third-party large-language-model provider(s) through their API to produce output. That processing is subject to the provider's own terms and data practices.

5.4. Legal and safety. We may disclose information where required by law, to enforce our Terms, or to protect the rights, safety, or property of Forjado, our users, or the public. Where we become aware of apparent child sexual abuse material, we are required by law to report it to the National Center for Missing & Exploited Children (NCMEC).

5.5. Business transfers. If Forjado is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction.

5.6. We do not use third-party analytics, marketing, or session-tracking tools at this time. If we add any, we will update this Policy.

6. Cookies

6.1. We use cookies and similar technologies necessary to authenticate you and maintain your session. We do not use advertising or third-party tracking cookies.

7. Data Retention and Deletion

7.1. We retain your information for as long as your account is active and as long as needed to provide the Service, and thereafter at our discretion unless you request deletion.

7.2. Your deletion request. You may request deletion of your information by contacting us at [email protected]. On a valid request, we will delete your information from our systems. Deletion is currently handled manually and may take some time to complete.

7.3. Limits of deletion. Deletion removes your information from our systems going forward. It does not reverse improvements already incorporated into the Service before deletion, which cannot be extracted. Certain records may be retained where required by law or for legal-defense purposes.

7.4. Code that you have exported to your own repository is in your control and is not affected by a deletion request to us.

8. Your Applications and Their End-Users

8.1. If you build an application that collects personal information from its own users, you are the party responsible for that information and for that application's privacy practices. Forjado's role is limited to hosting and operating the Service; we are not responsible for how your application handles its end-users' data, and this Policy does not serve as a privacy policy for your application or its end-users.

9. Security

9.1. We take reasonable measures to protect your information, including access controls, security logging, and two-factor authentication on our critical infrastructure. No system is perfectly secure, and we cannot guarantee absolute security.

9.2. Breach notification. If a data breach affecting your personal information occurs, we will notify affected users as required by applicable law, including Washington's data-breach notification law (RCW 19.255), generally within 30 days of discovery.

10. Changes to This Policy

10.1. We may update this Policy. If we make material changes, we will notify current users by email. Changes take effect on the date stated in the notice.

11. Contact

11.1. For privacy questions or requests, contact us at [email protected].