Privacy Policy

1. Scope of this policy

This policy explains how Forge AI Deployment (“Forge,” “we,” “us,” “our”) handles personal information collected through this website at forgeprivate.ai.

It does not govern the AI systems we deploy inside a customer’s environment. Those systems run on infrastructure the customer owns and controls, and the handling of personal data within them is governed by the services agreement and data processing agreement signed with that customer. Section 2 explains the difference.

2. Our two roles: controller and processor

The distinction matters, because it determines who is responsible for what.

• We are a controller for information collected through this website — for example, when you submit the consultation form. We decide what is collected and why, and this policy describes that.
• We are a processor when we deploy or operate an AI system inside a customer’s environment and that system handles personal data belonging to the customer. In that role we act only on the customer’s documented instructions. The customer remains the controller, and their own privacy notice applies to the individuals concerned.

Because our deployments run locally inside the customer’s infrastructure, we do not routinely receive, copy, or store customer data on our own systems in the course of an engagement.

3. Information we collect

Information you give us

When you submit the enquiry form, we receive the fields you complete:

• Full name (required)
• Work email address (required)
• Organization (required)
• Role or job title, selected from a list, or typed in if you choose “Other” (required)
• Primary interest, selected from a list (required)
• Phone number
• Size of your organization, selected from a list
• Industry
• How you heard about us
• Preferred way to be contacted
• Anything you write in the free-text field

The enquiry form links to this policy at the point of submission. We rely on legitimate interests to handle your enquiry, as set out in section 4, rather than on consent — so there is no consent for you to give or withdraw for this purpose. You can still object to that handling at any time, and section 10 explains how.

Please do not put confidential, classified, export-controlled, or health information in the free-text field. Your submission is stored in our enquiry database and copied to our business mailbox, and neither is an appropriate channel for sensitive material. If a conversation needs that level of protection, tell us and we will arrange a suitable channel first.

Information collected automatically

Our website host and our own enquiry server each record standard request data for security and operational purposes: IP address, browser user-agent, the page requested, and the time of the request.

When you submit the form we also record the address of the page you submitted it from. If you arrived through a link carrying campaign or referral parameters, those parameters form part of that address and are stored with it. We use this to understand which pages generate enquiries.

Cookies

We run no analytics, advertising, or tracking cookies, and we set no cookies for advertising or profiling of any kind. This site sets no cookies on your browser at all. One strictly necessary cookie exists elsewhere: signing in to our internal enquiry dashboard sets a session cookie, which applies to our own staff and not to visitors here.

What we do not collect

This site runs no analytics, advertising, or tracking scripts. It loads no third-party resources of any kind — fonts, styles, scripts, and images are all served from our own domain. Visiting this site does not expose your browsing activity to any advertising network, content delivery network, or font provider.

4. How we use it, and our legal basis

If you are in the UK or European Economic Area, the UK GDPR and EU GDPR require us to identify a lawful basis for each purpose. This table does that.

We do not send marketing emails from information submitted through this website. If that changes, we will update this policy and obtain consent where the law requires it.

5. Artificial intelligence and your information

Given what we do, we want to be explicit about this.

• We do not use information you submit through this website to train, fine-tune, or evaluate any AI model.
• We do not send information you submit through this website to any third-party AI service.
• No automated decision-making produces legal or similarly significant effects about you through this website. Your enquiry is read by a person.
• In customer engagements, we do not train models on customer data except where the customer instructs us to, on their own infrastructure, for their own benefit.

6. Who we share it with

We do not sell personal information, and we do not share it for cross-context behavioural advertising.

We share it only with the service providers required to operate this website. Each acts on our instructions under a written agreement.

We may also disclose information where we are legally required to, or where necessary to establish, exercise, or defend legal claims. If we are ever involved in a merger or acquisition, information may transfer as part of that transaction; we would update this policy if so.

7. International transfers

We are based in the United States, and our service providers process information in the United States. If you contact us from outside the United States, the information you submit will be transferred there.

Where we transfer personal information out of the UK or European Economic Area, we rely on the European Commission’s Standard Contractual Clauses, or the UK International Data Transfer Addendum, as applicable. You can ask us for details using the contact information below.

8. How long we keep it

You can ask us to delete your information sooner. See section 10.

9. How we protect it

Submissions are transmitted over TLS. They are stored in a database on a server we administer ourselves, rather than in a third-party sales platform, and they are copied to a business mailbox with access limited to the people who handle enquiries. That mailbox requires multi-factor authentication.

On that server: the database listens only on the machine’s own internal interface and is not reachable from the internet; the firewall denies everything not explicitly allowed; administrative access is by cryptographic key with password sign-in and direct root sign-in disabled; and security updates are applied automatically. Our internal dashboard for reading enquiries requires an individual account, and its sessions are held server-side so that access can be withdrawn immediately.

The website itself loads no third-party code, which materially reduces the ways it could be compromised.

No method of transmission or storage is completely secure, and we do not claim otherwise. If a breach affects your personal information and the law requires notification, we will notify you and the relevant supervisory authority within the required timeframe.

10. Your rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you
• Correct information that is inaccurate or incomplete
• Delete your information
• Restrict or object to processing, including processing based on legitimate interests
• Portability — receive your information in a machine-readable format
• Withdraw consent, where we rely on consent
• Complain to a supervisory authority. In the UK that is the Information Commissioner’s Office; in the EEA it is your national data protection authority

To exercise any of these, email development@forgeprivate.ai. We will respond within 30 days, or tell you within that period if we need longer and why. We will not charge you or treat you differently for exercising a right.

We may need to verify your identity before acting on a request. Any information you provide for verification is used only for that purpose.

11. Additional notice for California residents

This section supplements the rest of this policy and applies if you are a California resident, under the California Consumer Privacy Act as amended by the CPRA.

Categories of personal information collected in the past 12 months: identifiers (name, email address, phone number, IP address), professional or employment-related information (organization, role, organization size, industry), internet activity information (pages requested, and the page an enquiry was submitted from including any campaign parameters in its address), and any other information you choose to write in the free-text field. We collect these from you directly and automatically from your device, as described in section 3.

We do not collect sensitive personal information as that term is defined by the CCPA, and we ask that you do not submit any.

We have not sold or shared personal information in the past 12 months, and we do not do so. We do not sell or share the personal information of anyone under 16.

Purposes are set out in section 4. Disclosures are made only to the service providers named in section 6, for those business purposes.

California residents have the rights to know, delete, and correct personal information, to opt out of its sale or sharing, and not to be discriminated against for exercising those rights. Because we do not sell or share personal information, we do not offer a “Do Not Sell or Share My Personal Information” link. To exercise any other right, use the contact details in section 14. You may use an authorised agent, in which case we will ask for proof of their authority.

12. Children

This is a business website intended for a professional audience. It is not directed at children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, contact us and we will delete it.

13. Changes to this policy

We will update this page when our practices change, and revise the “last updated” date above. If a change materially affects how we use information you have already given us, we will take reasonable steps to tell you directly.

14. How to contact us

For any privacy question, or to exercise a right described above:

Email: development@forgeprivate.ai
Post: Forge AI Deployment, Austin, Texas, United States

If you are in the UK or EEA and are not satisfied with our response, you may complain to your supervisory authority.