Privacy Policy

    Last updated: March 24, 2026 · Effective: March 24, 2026

    This privacy policy was generated and is maintained using PolicyForge. We eat our own dogfood — the same compliance standards we help our customers achieve apply to us first.

    Summary

    Data collected automatically

    • Tracker (cookies) — with consent only
    • Usage data (pages visited, clicks)
    • Device information (browser, OS, screen size)
    • IP address (anonymized)
    • Approximate geographic location
    • Referral source
    • Session duration and page load times

    Data you provide to us

    • Email address
    • Password (hashed, never stored in plain text)
    • Name (if signing in via OAuth)
    • Profile picture (if signing in via OAuth)
    • Business name and website URL
    • Industry and jurisdiction selections
    • Data practices and policy preferences
    • Payment/billing email (via Lemon Squeezy)
    • Contact form messages
    • AI Legal Assistant chat messages
    • Support ticket content

    Third-party services we use

    SupabaseLemon SqueezyVercelGoogle AdsResendGoogle Gemini

    Processing purposes

    1. Service delivery and policy generation
    2. Account creation and authentication
    3. Payment processing
    4. Transactional email delivery
    5. AI-powered policy generation
    6. Compliance monitoring and alerts
    7. Analytics and service improvement
    8. Advertising measurement (with consent)
    9. Customer support
    10. Legal obligation compliance
    11. Security and fraud prevention
    12. Policy hosting and analytics

    For the purposes of the GDPR, CCPA, PIPEDA, LGPD, and other applicable data protection laws, the data controller responsible for your personal data is:

    PolicyForge Inc.

    General Contact: privacy@policyforge.co

    Data Protection Officer: dpo@policyforge.co

    Personal data is collected for the following purposes and using the following services. Each service acts as a Data Processor on our behalf unless otherwise stated.

    Hosting and Backend Infrastructure

    Payment Processing

    Email Delivery

    AI-Powered Processing

    Advertising and Measurement (Consent Required)

    If you have questions about this Privacy Policy, wish to exercise your data protection rights, or want to file a complaint, please contact us:

    PolicyForge Inc.

    General inquiries: privacy@policyforge.co

    Data Protection Officer: dpo@policyforge.co

    If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority. For EU users, a list of supervisory authorities is available at edpb.europa.eu.