Privacy Policy — Forge OS
Effective 2026-08-07
Forge OS is operated by The Forge Agency, Castle Rock, Colorado. This policy explains what data Forge OS collects, why, how long it is kept, and how to remove it.
Who we are
The Forge Agency
Castle Rock, Colorado, United States
andrew@the-forge-agency.com
What Forge OS does
Forge OS connects to business software you already use, reads information from it, and sends you a short daily summary of what needs your attention. It does not modify anything in your connected accounts.
What we collect
Account information you give us
Your name, email address, business name, and time zone.
Data from services you connect. You choose which to connect, and you can disconnect any of them at any time.
| Service | What we read | Access |
|---|---|---|
| QuickBooks Online | Invoices, payments, customers | Read only |
| Google Business Profile | Locations, reviews, profile completeness | Read only |
| Google Search Console | Search queries and page performance for your site | Read only |
| Ahrefs | SEO metrics for your site, using an API key you supply | Read only |
We request read-only access. Forge OS cannot create, change, or delete anything in your connected accounts.
Usage information
Records of when data was synced, what was retrieved, whether a summary was generated, and whether it was delivered.
What we do not collect
We do not read your email. We do not access your bank accounts. We do not collect payment card details.
Our website and the Forge OS application are different
This policy covers both, and they behave differently. The distinction matters, so we state it plainly rather than making one claim about both.
Our marketing website (the-forge-agency.com) uses analytics and advertising technology like most business websites:
| Tool | Purpose |
|---|---|
| Google Analytics 4 | Understanding which pages visitors read |
| Meta Pixel | Measuring our advertising and showing ads to people who have visited the site |
These set cookies and share limited browsing information with Google and Meta. If you have visited our website, you may be shown our ads on Meta platforms.
You can opt out at any time:
- Meta: adjust your ad preferences in your Facebook or Instagram account settings
- Google Analytics: install the Google Analytics opt-out browser add-on
- Both: browser controls that block third-party cookies, or a browser sending Global Privacy Control
- Or email us and we will honor the request
Inside the Forge OS application, none of this happens. No advertising pixels, no advertising cookies, no ad networks. Your business data — your accounts receivable, your customers, your reviews — is never shared with an advertising platform, and never used to target ads at you or anyone else.
We do not run ads inside Forge OS, and we never will. A tool you rely on to tell you the truth about your money should not also be selling your attention.
How your data is stored
- All data is encrypted in transit and at rest.
- Authorization tokens for connected services are stored in an encrypted secrets vault, separate from the application database. They are never written to a normal database column and never written to a log.
- Every record is scoped to your organization and isolated at the database level. Another customer cannot query your data.
- Infrastructure is hosted in the United States on Supabase (database) and Vercel (application), both running on Amazon Web Services.
Automated processing
Forge OS uses a large language model to write your daily summary in plain language.
What is sent to the model: the specific figures and records selected for that day's summary — for example an outstanding balance, an invoice number, a customer name, or a review.
What is not sent: your authorization tokens, your password, or your full account history.
The model provider is Anthropic. Data sent through Anthropic's API is not used to train their models.
The model does not decide what is true. Every figure and name in a summary is calculated by our own software before the model runs, and every summary is checked against those source records before it is sent to you.
How long we keep it
| Data | Retained |
|---|---|
| Raw responses from QuickBooks and Google Business Profile | 90 days, then deleted |
| Raw responses from Ahrefs | 180 days, then deleted |
| Summarized figures and daily summaries | While your account is active |
| Account information | While your account is active |
Retention periods are enforced by the system, not by manual cleanup.
If you close your account, your data is deleted within 30 days. If you want it deleted sooner, email us and we will do it.
Who else sees it
We do not sell your data. We do not share it for advertising. We do not share it with other customers.
We use these service providers to operate Forge OS:
Forge OS application:
| Provider | Purpose |
|---|---|
| Supabase | Database and secrets storage |
| Vercel | Application hosting |
| Anthropic | Writing your daily summary |
| Resend | Email delivery |
Marketing website only:
| Provider | Purpose |
|---|---|
| Google (Analytics) | Website traffic measurement |
| Meta | Advertising measurement and audiences |
Google and Meta receive website browsing information only. Neither ever receives data from your connected accounts.
We may disclose data if required by law.
Your choices
- Disconnect a service at any time. This revokes our access immediately and stops all syncing from it.
- Ask for a copy of your data, and we will provide it.
- Ask us to delete your data, and we will.
- Stop the emails using the unsubscribe link in any summary.
Email andrew@the-forge-agency.com for any of these. We will respond within 30 days.
Colorado and other privacy laws
The Colorado Privacy Act gives Colorado residents rights of access, correction, deletion, and portability, and the right to opt out of the sale of personal data and of targeted advertising.
We do not sell personal data.
We do use targeted advertising, but only for our marketing website. As described above, the Meta Pixel on the-forge-agency.com allows us to show ads to people who have visited it. You can opt out through the methods listed in that section, through your browser's Global Privacy Control setting, or by emailing us — we will honor any of those.
No data from inside the Forge OS application is ever used for advertising, targeted or otherwise.
Access, correction, deletion and portability requests are made by emailing us. We respond within 30 days and will not charge you or degrade your service for exercising a right.
If you are in a jurisdiction with comparable rights, the same process applies.
Children
Forge OS is a business tool and is not intended for anyone under 18.
Changes
If this policy changes materially, we will email account holders before the change takes effect. The effective date at the top always reflects the current version.
Contact
andrew@the-forge-agency.com