Legal and trust
Privacy Policy
Data collected, purposes, sharing, retention, and your choices.
- Effective:
- August 11, 2026
- Last updated:
- September 9, 2026
1. Scope and roles
This Privacy Policy explains how ForgeLabs, a United States sole proprietorship operating ForgeOffer, handles personal information through ForgeOffer websites, accounts, career tools, employer workspaces, support channels, and related services.
For individual career accounts, ForgeLabs generally determines why and how account information is processed. For candidate data an employer organization uploads or collects in its workspace, that organization may be the controller or business and ForgeLabs may act as its processor or service provider. The organization remains responsible for its own privacy notice, lawful basis, instructions, and employment-law duties.
2. Information we collect
- Account and contact data, including email address, authentication records, language, market, membership, and support communications.
- Career and application data, including profile details, resumes, skills, experience, goals, job searches, saved jobs, applications, cover letters, interviews, offers, coaching records, notes, and documents you choose to provide.
- Employer-workspace data, including organization details, team roles, job definitions and postings, applicant records, interview materials, scorecards, workflow notes, and audit history.
- Technical and usage data, including device and browser information, IP-derived context, timestamps, page and feature activity, error and security logs, and local preferences stored through cookies or browser storage.
- Data from providers and public or user-directed sources, such as job-listing results, location suggestions, market information, and content imported at your direction.
- Payment and transaction data when you use paid checkout. Stripe handles card details; ForgeOffer receives limited billing, status, customer, subscription, invoice, and transaction information needed to administer the plan.
3. Why we use information
- Provide, personalize, maintain, and troubleshoot the features you request; authenticate accounts; preserve work; and provide support.
- Generate user-requested drafts, analyses, searches, exports, and workflow records, including through configured AI or job-data providers.
- Protect users and ForgeOffer, prevent fraud and abuse, enforce access boundaries, maintain audit records, and comply with legal obligations.
- Measure feature performance and improve usability, reliability, accessibility, and safety using data reasonably minimized for that purpose.
- Send transactional messages and, where you separately choose, product or marketing communications that you can opt out of.
Depending on the context and law, our legal bases may include performing a contract with you, taking steps at your request, your consent, compliance with legal obligations, and legitimate interests such as securing and improving the service. Where we rely on consent, you may withdraw it prospectively.
4. AI and automated processing
When you invoke an AI-assisted feature, ForgeOffer may send the instructions and relevant content needed for that request to the configured AI provider. Do not include unnecessary sensitive information. ForgeOffer does not release candidate scoring or ranking by default and does not authorize employers to use ForgeOffer as the sole or automatic basis for consequential employment decisions.
ForgeOffer may produce match explanations, drafting assistance, or recommendations. These outputs require human review and may be corrected or challenged through the applicable user or employer workflow. See the AI Disclaimer for additional limits.
5. When information is shared
We may share information with service providers that host data, authenticate users, monitor security, deliver user-requested AI or document functions, supply job or location results, or support ForgeOffer. They receive information only for contracted services and are subject to appropriate restrictions. Current product code may use providers such as Supabase, Vercel, OpenAI, Adzuna, JSearch/RapidAPI, and mapping or location services when their related feature is configured and used.
We may also share information when you direct us to do so; with an employer organization you join or apply to; to comply with law or protect rights, safety, and the service; or in connection with a merger, financing, acquisition, or sale, subject to lawful safeguards. ForgeOffer does not currently sell personal information for money or use career content for cross-context behavioral advertising.
6. Cookies and local storage
Forge Labs uses essential storage to operate ForgeOffer. With your permission, Meta Pixel uses advertising cookies and shares page visits, registration and checkout-start events with Meta to measure ads. You can reject advertising and still use ForgeOffer. Browser privacy signals are respected. Meta may receive your IP address, browser information, permitted page URLs, advertising identifiers and these events. We do not add resume content, form fields, account IDs or payment details to advertising events. Automatic advanced matching is disabled. Your choice is stored on this device for 180 days. You can change it using Advertising cookie settings in the footer; rejection stops future events and removes accessible Meta cookies. Private workspace pages and URLs containing unapproved parameters are excluded. Registration means an account creation response, not email verification; checkout start does not mean payment. Meta processes received data under its privacy policy (https://www.facebook.com/privacy/policy/).
7. Retention, deletion, and account closure
We retain information while your account or organization workspace is active and as reasonably needed for the feature, security, billing, audit, dispute, and legal purposes described here. A cancelled subscription may leave saved career information and billing history in the account so a returning subscriber can resume later. Institutional allocations may remain stored but dormant when current paid funding is absent. Retention varies by record type and employer instruction. When data is no longer needed, we delete or de-identify it, subject to limited backups, fraud-prevention records, legal holds, transaction evidence, and records the law requires us to keep.
A signed-in account owner may request deletion through the /profile workflow, which requires current-password verification and resolution of any owned employer workspaces. ForgeOffer checks relevant Live Stripe Checkout Sessions before deletion. It may safely close only an open, unpaid session with exact ForgeOffer metadata, the expected billing target, and no subscription; paid, completed, subscribed, or ambiguous states block deletion for review. The workflow records the terminal provider state and preserves limited billing and audit history before Auth deletion. You may also contact founder@getforgeoffer.com for privacy help. Closing a personal account may not delete a copy lawfully retained by an employer organization or a record needed to document a transaction, consent, withdrawal, safety event, dispute, or legal obligation.
8. Security and international transfers
We use administrative, technical, and organizational safeguards designed for the nature of the information, including scoped access and service-side security controls. No internet service is perfectly secure. Use a unique password and contact us if you suspect misuse.
ForgeOffer and its providers may process information in the United States and other countries. Where required, we use an approved transfer mechanism or another lawful safeguard and preserve mandatory local rights.
9. Your rights and choices
Depending on where you live, you may have rights to know or access information, correct it, delete it, receive a portable copy, restrict or object to processing, withdraw consent, opt out of certain sharing or profiling, and appeal a denied request. You may also complain to a data-protection or consumer-protection authority.
Submit a request to founder@getforgeoffer.com from the email associated with your account and describe the request. We may verify identity and authority before acting. Authorized agents must provide legally sufficient proof. We will not discriminate against you for exercising a privacy right.
10. Children
ForgeOffer is not intended for children under 16, and we do not knowingly collect their personal information. If you believe a child has provided information, contact us so we can investigate and take appropriate action.
11. Changes and contact
We may update this Policy as the service, providers, or law changes. We will post the revised date and provide additional notice when required. Privacy questions, rights requests, and complaints may be sent to founder@getforgeoffer.com.