1. Information We Collect

We collect information you provide directly to us when you register for a ForgeForBusiness account, create bulk orders, subscribe to our services, or contact us for support.

• Business information (company name, industry, size)
• Contact information (name, business email, phone number)
• Billing addresses and payment information (processed securely through Stripe)
• Account credentials and team member information
• Brand assets (logos, colors, company descriptions)
• Bulk order history and subscription usage
• Communication records and support requests

2. How We Use Your Information

We use the information we collect to:

• Process and fulfill bulk orders, including print-on-demand production
• Manage your subscription, including quota tracking and billing
• Provide customer support and respond to inquiries
• Send order confirmations, shipping updates, and subscription notifications
• Generate invoices and process payments
• Manage your team members and their permissions
• Improve our products and services
• Comply with legal obligations and prevent fraud

3. Information Sharing

We do not sell, trade, or otherwise transfer your business information to third parties, except in the following circumstances:

• With Lulu.com for print-on-demand order fulfillment
• With Stripe for payment processing and subscription billing
• With Resend for transactional email delivery
• With UploadThing for file storage (brand assets, PDFs)
• With Supabase for secure data hosting
• When required by law or to protect our rights
• With your explicit consent

4. Data Security

We implement enterprise-grade security measures to protect your business information:

• SSL/TLS encryption for all data transmission
• PCI-compliant payment processing through Stripe
• Row Level Security (RLS) policies for data isolation between organizations
• Regular security audits and updates
• Limited access to personal information on a need-to-know basis
• Sentry error monitoring and alerting

5. Data Retention

We retain your business information for as long as your account is active or as needed to provide you services. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we will delete or anonymize your personal information within 90 days, except where retention is required by law.

6. Your Rights

As a ForgeForBusiness customer, you have the right to:

• Access and update your business information
• Request deletion of your account and data
• Opt out of marketing communications
• Request a copy of your data in a portable format
• Withdraw consent for data processing
• Invite and manage team members

7. Sub-Processors

We use the following sub-processors to provide our services:

• Stripe — Payment processing, subscription billing, invoicing
• Lulu.com — Print-on-demand fulfillment
• Supabase — Database hosting, authentication, file storage
• Resend — Transactional email delivery
• UploadThing — File upload and storage
• Vercel — Application hosting and analytics

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure that such transfers comply with applicable data protection laws and that your information remains protected.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by email or through your account dashboard at least 30 days before the changes take effect.

10. Contact Us

If you have any questions about this privacy policy or our data practices, please contact us at: