Privacy Policy

We collect the following categories of information:

• Account information. Your email address, password (hashed), and any profile details you provide. If you enable multi-factor authentication, we store the minimum metadata required to verify your factor.
• Household and financial data. Information you enter or import about persons in your household, accounts, balances, transactions, scenarios, rules, events, and tax-related details.
• Connected institution data. When you link an account through our aggregation provider, that provider returns balances, holdings, and transactions which we store on your behalf. Access tokens to your institutions are encrypted at rest.
• Usage and device information. Logs of requests to our service, including IP address, user agent, timestamps, and basic interaction telemetry. We use this data to operate, secure, and improve the service.
• Support communications. Messages you send us via the support form or by email.

• To provide, operate, and maintain the service.
• To run the simulations, projections, and tax calculations you request.
• To authenticate users, prevent fraud, and protect the integrity of the service.
• To respond to your support requests and communicate with you.
• To process payments for paid subscriptions.
• To improve the service, including by analyzing aggregated and de-identified usage patterns.
• To comply with legal obligations.

We do not sell your personal information. We share data only with service providers that help us operate Forge, and only to the extent necessary for them to perform their function:

• Supabase (database, authentication, file storage).
• Plaid (account aggregation, when you choose to link an institution).
• Stripe (payment processing for paid subscriptions).
• Resend (transactional email such as invitations and account notices).
• Hosting and infrastructure providers used to run the service.

We may also disclose information if required to do so by law, to enforce our Terms, or to protect the rights, safety, or property of our users or the public.

We retain your data for as long as your account is active. When you delete your account, we delete or anonymize your personal data within a reasonable period, except where we are required to retain it for legal, tax, or accounting purposes.

We use industry-standard practices to protect your data, including encryption in transit (TLS), encryption at rest for sensitive credentials, row-level access controls in our database, and multi-factor authentication on user accounts. No system is perfectly secure, but we work to keep yours as safe as we reasonably can.

Depending on where you live, you may have rights under applicable privacy laws to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Delete your account and associated data.
• Export a portable copy of your data.
• Object to or restrict certain processing, where required by law.

You can exercise most of these rights from your account settings. For anything else, email us at forge@acbstudios.llc.

We use a small number of first-party cookies that are strictly necessary for authentication, session refresh, and remembering per-device preferences (such as your selected scenario or theme). We do not use third-party advertising or tracking cookies.

Forge is not directed to children under 18, and we do not knowingly collect personal information from anyone under that age. If you believe a child has provided us with personal information, please contact us and we will delete it.

Our service is hosted in the United States. If you access Forge from outside the United States, you understand that your information will be processed in the United States, where data protection laws may differ from those of your country.

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page and, for material changes, provide additional notice through the service or by email.

Questions about this policy or your data? Email us at forge@acbstudios.llc.