Privacy policy for ForgeLane

This notice explains how ForgeLane and S55 ForgeLane LLC collect, use, and protect information when you use the service.

What we collect

We may collect names, emails, company information, inquiry details, project data, and usage data needed to operate and improve the website and platform.

How we use it

We use the information to deliver the service, respond to requests, process projects, provide customer support, and improve the quality and security of the product.

Your choices

You may contact us to request access, correction, deletion, or restriction of your personal data where applicable. We will respond to legitimate requests in a reasonable timeframe.

Canadian users (PIPEDA)

If you are located in Canada, we handle your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA). We collect only the personal information reasonably needed to provide the service, we do not use or disclose it for purposes beyond those described in this notice without your consent, and we retain it only as long as necessary for those purposes or as required by law. You may contact us at any time to ask what personal information we hold about you, request a correction, or withdraw consent for optional processing, subject to legal and contractual limits.

Where your data is processed and who processes it

Our infrastructure and service providers are based in the United States, so personal information is stored and processed there, including for users located in Canada or elsewhere. We use a limited set of third-party service providers to operate the platform, each bound to use data only to provide their service to us:

Supabase — database, authentication, and file storage.
Vercel — application hosting and content delivery.
Anthropic and OpenAI — AI processing of sourcing briefs, documents, and images you submit, used to generate quotes, specs, and analysis.
Resend — transactional email delivery.

All data in transit is encrypted (TLS), and data at rest in our database is encrypted. Access to production data is restricted to authorized personnel and enforced by database-level access policies. We retain account and project data for as long as your account is active, and for a reasonable period afterward to meet legal, accounting, or dispute-resolution needs, after which it is deleted or anonymized.

Contact

For privacy questions or requests, email s55@flowsource.cloud.