Privacy Policy

Effective Date: September 6, 2026

Platform: ForgeCore Platform ("ForgeCore", "We", "Us", or "Our")

Scope: This Privacy Policy applies to all services, B2B AI strategy sprints, architecture simulations, and web services provided by ForgeCore.

1.1 Data Controller and Framework

ForgeCore operates as an EU-based B2B Managed AI Consulting & Architecture Studio. We are committed to protecting personal and business data in strict compliance with the General Data Protection Regulation (GDPR) (EU 2016/679) and applicable data protection legislation.

1.2 Information We Collect

To execute strategic simulations and deliver technical deliverables, we collect and process the following categories of data:

  • Account and Contact Data: Client name, business email address, company registration details, billing address, and representative credentials.
  • Project and Input Data: Problem statements, task specifications, company domain URLs, uploaded assets (such as company logos), and provided business context.
  • Public URL Data: Webpage content retrieved automatically from publicly accessible URLs provided by the Client for task context enrichment (processed via Jina Reader).
  • Billing and Payment Data: Bank transaction records, proforma invoice details, and PayPal transaction IDs. Note: We do not store raw credit card numbers on our servers.
  • Technical and Usage Data: IP addresses, browser types, session timestamps, and administrative audit logs necessary to secure and maintain the ForgeCore Platform.

1.3 Legal Basis and Purpose of Processing

We process data strictly under the following legal grounds:

  • Performance of Contract (Art. 6(1)(b) GDPR): Processing input data, executing multi-agent simulations, providing Pre- & Post-handling expert reviews, and delivering Master Plan PDF exports.
  • Legal Obligation (Art. 6(1)(c) GDPR): Accounting, tax compliance, and proforma/invoice retention.
  • Legitimate Interest (Art. 6(1)(f) GDPR): Maintaining platform security, preventing abuse, and measuring system performance.
  • Explicit Consent (Art. 6(1)(a) GDPR): Showcasing client-branded case studies in the Public Gallery (is_gallery_published = true).

1.4 Data Retention and Sub-processors

  • Active Project Data: Retained for the duration of the engagement and stored securely for up to 36 months to allow historical reference for recurring client sprints.
  • Third-Party Sub-processors: We utilize vetted, enterprise-grade sub-processors:
    • OpenAI LLC: For commercial API LLM inference (gpt-5.6 series).
    • PayPal Inc. & Partner Banks: For transaction execution and bank-transfer reconciliation.
  • Data Erasure: Clients may request full data deletion at any time, subject to statutory tax record retention requirements.

ForgeCore Platform is designed and built by Webtech Solutions.