Privacy Policy

This policy explains what data Forge (“we”, “us”) collects when you use forgeyn.com.ng (the “Service”), why we collect it, and the choices you have. The short version: we collect what the product needs to work, we do not sell your data, and the code the agents write for you is yours.

Account data. When you sign up (email or GitHub Sign-In), we store your email address and authentication identifiers. Passwords, if you use them, are stored only as hashes by our identity provider.

Project data. The prompts you send, the apps the agents build, files in your workspaces, and build history. This is the content of the Service and it belongs to you.

Connector tokens. If you connect an account (for example GitHub or Supabase) so agents can act on your behalf, we store the OAuth tokens encrypted at rest, scoped to the capabilities you granted, and never expose them to the agent process itself.

Usage data. We keep operational logs (requests, errors, build outcomes) to keep the Service reliable and to debug it.

We use your data to operate the Service: authenticating you, running and resuming your builds, storing your projects, and keeping the platform healthy. We do not use your project content to advertise, and we do not sell it to anyone.

We run on infrastructure and services that process data on our behalf: Supabase (authentication and database hosting), Render (application hosting), GitHub (optional sign-in and repository connectors), and model inference providers (including NVIDIA) that generate the agents' responses. Each receives only the data required for its role.

We set a session cookie to keep you signed in. That is the extent of it — no third-party advertising or tracking cookies.

We share data only with the processors listed above, or when required by law. We do not sell personal data, and we do not share your project content with third parties for their own purposes.

Account and project data are retained while your account is active. When you delete your account, we delete your personal data and project content within 30 days, except where we must keep operational logs for security and legal obligations.

You can access, export, correct, or delete your data from the settings page, or by contacting us. If you are in the EU/EEA or a jurisdiction with similar law, you have rights of access, rectification, erasure, restriction, portability, and objection.

We use encryption in transit, encrypt connector tokens at rest, isolate users' projects from each other, and keep secrets out of logs. No system is perfect, but we design as if an attacker is already knocking.

If this policy changes materially, we will notify signed-in users before the change takes effect.

Questions about privacy? Email privacy@forgeyn.com.ng and we will answer.