Privacy Policy

We collect account information such as your name, email address, authentication details, workspace membership, billing contact details, and settings you choose inside ForgedBase.

We also store operational data needed to provide the service, including connected provider metadata, server and site records, deployment history, activity logs, command output, backup metadata, notification preferences, and support context you choose to send us.

When you connect infrastructure providers, source control providers, cloud storage providers, or notification integrations, ForgedBase stores the credentials, tokens, IDs, scopes, and account metadata required to operate those connections.

Examples include provider account names, repository metadata, server regions, SSH key identifiers, database backup destinations, webhook settings, and connected account email addresses returned by the provider.

We use information to create and manage workspaces, provision servers, deploy sites, manage domains and SSL, operate database backups, send notifications, process billing, secure accounts, troubleshoot problems, and improve the product.

We may use logs and activity records to detect abuse, investigate failures, maintain reliability, and provide customer support.

Payment processing is handled by Stripe. ForgedBase stores billing status, plan information, customer identifiers, invoice metadata, and related billing events, but does not store full card numbers.

Stripe processes payment details under its own privacy and security practices.

If you create database backups, ForgedBase may temporarily store backup files or transfer them to the storage destination you choose, such as an S3-compatible bucket, Dropbox, Google Drive, or Box.

You are responsible for the data you place in hosted sites, databases, repositories, backup destinations, and connected third-party services.

We share information with service providers only as needed to run ForgedBase, such as hosting, email delivery, payments, analytics or diagnostics, infrastructure APIs, source control APIs, cloud storage APIs, and notification services you connect.

We do not sell personal information. We may disclose information if required by law, to protect the service, or to prevent fraud, abuse, or security incidents.

We keep information for as long as needed to provide the service, comply with legal obligations, resolve disputes, maintain audit history, and enforce agreements.

When you delete resources, disconnect providers, or close an account, some records may remain for security, billing, backup, or audit purposes unless deletion is required and technically possible.

We use reasonable technical and organizational safeguards designed to protect account data, provider credentials, and operational records. Sensitive provider credentials are stored encrypted where supported by the application.

No online service can guarantee absolute security. Keep your account password, two-factor authentication, SSH keys, provider credentials, and connected service accounts protected.

You can update account details, disconnect providers and integrations, rotate credentials, remove SSH keys, delete resources, change notification settings, and manage billing details from your workspace where those controls are available.

You can also contact us to request help accessing, correcting, exporting, or deleting personal information associated with your account.

We may update this policy as ForgedBase changes. When changes are material, we will take reasonable steps to notify users, such as updating this page, showing an in-app notice, or sending an email.

For privacy questions or requests, contact us at privacy@forgedbase.com.