Privacy Policy

This Privacy Policy describes how forg. ("we," "us," or "our") collects, uses, and shares information about you when you use our website located at forg.to and any related services (collectively, the "Services").

By accessing or using the Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with this Privacy Policy, you must not access or use the Services.

1. Information We Collect

1.1 Information You Provide Directly

When you create an account, we collect the following information depending on your authentication method:

Google OAuth:

• Your Google account identifier
• Your email address
• Your display name
• Your profile image URL

Email & Password:

• Your email address
• Your password (stored securely as a hash)

Linked Social Accounts (Optional):

• Twitter/X: Username, display name, profile image, account identifier, OAuth tokens for posting
• LinkedIn: Email, name, profile image, account identifier, OAuth tokens for posting

1.2 Content You Submit

We collect content you voluntarily submit to the Services, including:

• Product information (name, description, images, links)
• Updates and posts you create
• Comments and interactions
• Scheduled posts for cross-posting

1.3 Information We Do Not Collect

We expressly do not collect the following information:

• Your direct messages or private communications on social platforms
• Your complete followers or following lists
• Your browsing history outside of forg.
• Your location data or IP address for tracking purposes
• Any financial or payment information

2. How We Use Your Information

We use the information we collect for the following purposes:

• To provide the Services: Authenticate your account, display your profile, and enable core functionality.
• To enable cross-posting: Post content on your behalf to connected social platforms (Twitter/X, LinkedIn) when you authorize it.
• To send notifications: Email you about product launches, engagement updates, and important platform communications.
• To display community features: Show leaderboards, trending products, and community activity.
• To improve the Services: Analyze aggregate, anonymized usage patterns to improve the platform.

3. How We Share Your Information

3.1 Public Information

The following information is publicly visible to all forg. users:

• Your username, display name, and profile image
• Your products and their associated content
• Updates and posts you publish
• Your engagement activity (likes, comments, follows)

3.2 Third-Party Service Providers

We use the following third-party services to operate the platform:

• MongoDB Atlas: Database hosting for storing user accounts and content
• Vercel: Website and API hosting
• Cloudinary: Image storage and optimization for product logos and uploads
• Resend: Email delivery for notifications and communications
• Inngest: Background job scheduling for automated tasks
• Twitter/X API: OAuth authentication and cross-posting
• LinkedIn API: OAuth authentication and cross-posting
• Google API: OAuth authentication

3.3 No Sale of Personal Information

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

4. Data Retention

We retain your information for as long as your account is active or as needed to provide you the Services. Specifically:

• Account data: Retained until you request account deletion
• Products and content: Retained until you delete them or request account deletion
• OAuth tokens: Retained while your social accounts are connected; deleted when you disconnect

5. Data Security

We implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include encrypted data transmission (HTTPS), secure database access controls, password hashing, and OAuth token security. However, no method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

6. Your Rights and Choices

6.1 Access and Portability

You may access your account information, products, and activity through your profile at any time.

6.2 Disconnect Social Accounts

You may disconnect your Twitter/X or LinkedIn accounts at any time through Settings. This will revoke our ability to post on your behalf and delete the associated OAuth tokens.

6.3 Account Deletion

You may request deletion of your account by contacting us. Upon deletion, we will remove your profile information and content.

7. Children's Privacy

The Services are not intended for individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. By using the Services, you consent to the transfer of your information to these countries.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Your continued use of the Services after any such changes constitutes your acceptance of the new Privacy Policy.

10. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us at: