ForgeOSLegal

Privacy Policy

Effective date: May 26, 2026 · ForgeOS Ltd.

1. Introduction

ForgeOS Ltd. (“ForgeOS,” “we,” “us,” “our”) operates the website for-geos.com and the ForgeOS platform. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our services.

By using the Service you agree to the practices described in this policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Information You Provide Directly

  • Account data: name, email address, organization name, and password when you register.
  • Payment data: billing address and payment method details, processed securely by our payment processor (Stripe). We do not store full card numbers.
  • Communications: messages you send us via contact forms, email, or support channels.
  • User content: configuration files, policies, and data you upload to the platform.

2.2 Information Collected Automatically

  • Usage data: pages visited, features used, timestamps, and interaction patterns.
  • Device and connection data: IP address, browser type, operating system, and referring URLs.
  • Cookies and similar technologies: session cookies necessary for authentication, and analytics cookies (see Section 6).

2.3 Information from Third Parties

  • Authentication providers (e.g., Google, GitHub) if you use single sign-on.
  • Payment processors for transaction confirmation and fraud prevention.

3. How We Use Your Information

We use your information to:

  • Provide, operate, and improve the Service.
  • Process payments and manage your subscription.
  • Send transactional emails (receipts, password resets, service notifications).
  • Respond to your inquiries and provide customer support.
  • Detect and prevent fraud, abuse, and security incidents.
  • Comply with legal obligations.
  • Send marketing communications if you have opted in (you may opt out at any time).

4. Legal Bases for Processing (GDPR)

Where the GDPR applies, we process your data under the following legal bases:

  • Contractual necessity: processing required to provide the Service you subscribed to.
  • Legitimate interests: fraud prevention, security, and product improvement.
  • Consent: marketing emails and non-essential cookies (withdrawable at any time).
  • Legal obligation: compliance with applicable laws and regulations.

5. Sharing Your Information

We do not sell your personal information. We may share it with:

  • Service providers: cloud hosting (AWS / GCP), payment processing (Stripe), analytics, and support tools — bound by data processing agreements.
  • Business transfers: in the event of a merger, acquisition, or asset sale, your information may be transferred. We will notify you before your data is subject to a different privacy policy.
  • Legal requirements: when required by law, court order, or governmental authority.
  • Protection of rights: to enforce our Terms, protect the safety of our users, or prevent fraud.

6. Cookies

We use the following types of cookies:

  • Essential cookies: required for authentication and core platform functionality. These cannot be disabled.
  • Analytics cookies: help us understand how the Service is used (e.g., page view counts). You may opt out via your browser settings or our cookie preferences banner.

You can control cookies through your browser settings. Disabling essential cookies may impair Service functionality.

7. Data Retention

We retain your personal data for as long as necessary to provide the Service and for the following periods thereafter:

  • Account data: 30 days after account deletion, then anonymised.
  • Payment records: 7 years, as required by applicable financial regulations.
  • Log data: 90 days for security monitoring purposes.

8. International Data Transfers

Your information may be processed in countries outside your jurisdiction, including Israel, the United States, and the European Union. Where required, we use Standard Contractual Clauses or other lawful transfer mechanisms to protect your data.

9. Your Rights

Depending on your location you may have the right to:

  • Access, correct, or delete your personal data.
  • Object to or restrict certain processing.
  • Receive a portable copy of your data.
  • Withdraw consent (where processing is based on consent).
  • Lodge a complaint with your local data protection authority.

To exercise your rights, email us at adam@for-geos.com. We will respond within 30 days.

10. Children's Privacy

The Service is not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe we have collected such information, contact us immediately at adam@for-geos.com and we will delete it.

11. Security

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, access controls, and regular security audits. However, no method of transmission over the internet is 100% secure. For responsible disclosure of security vulnerabilities, see for-geos.com/security.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the effective date. For material changes, we will notify you by email at least 14 days in advance.

13. Contact Us

For privacy-related questions or requests, contact our privacy team at adam@for-geos.com.

ForgeOS Ltd. · for-geos.com