Privacy Policy

1. Information we collect

• Account information: email address, name, and password (or other sign-in method you use) when you create an account.
• Workspace and usage data: workspace name, members, contacts, campaign content (e.g. email drafts and sequences), and activity necessary to provide the service.
• When you connect Gmail: we use Google OAuth to obtain access and refresh tokens that allow us to send and read email on your behalf. We do not store your Google account password. We store encrypted OAuth tokens and use them only to provide the email features you request (sending outbound email, syncing inbound email).
• Technical and log data: IP address, browser type, and similar technical data as needed for security and operation of the service.

2. How we use your information

We use the information we collect to:

• Provide, operate, and improve the ForgeLeads service (lead discovery, outreach, campaigns, and email).
• When you connect Gmail: send and read email on your behalf solely to power the email features you use within ForgeLeads (e.g. sending sequences, receiving replies).
• Authenticate you and manage your account and workspace.
• Comply with applicable law and protect the security of our service.

We do not use your data for advertising, retargeting, or selling your data to third parties. We do not use your Google or Gmail data for any purpose other than providing the email functionality you have requested within our app.

3. Google / Gmail data — limited use

When you connect your Gmail account via “Sign in with Google,” we request access to Gmail (e.g. https://mail.google.com/) to:

• Send email on your behalf (outbound campaigns and replies).
• Read email (e.g. inbound replies) only as necessary to provide the features you use in ForgeLeads.

Our use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements. We only use Google user data to provide the email and productivity features described above, with your consent. We do not transfer Google user data to third parties for advertising or other purposes unrelated to providing our service. We do not use Google user data for advertising or to determine creditworthiness. You may disconnect Gmail at any time from your workspace email settings; we will stop using your Gmail access and you may revoke access in your Google account settings.

4. Storage and security

We store your data on infrastructure provided by Google (e.g. Firebase, Google Cloud). Sensitive credentials such as OAuth tokens and email passwords are encrypted at rest. We use industry-standard practices to protect your data; we do not sell or rent your personal information.

5. Sharing and disclosure

We share information only as necessary to operate the service: with service providers that process data on our behalf (e.g. hosting, email delivery), under contracts that require them to protect your data. We may disclose information if required by law or to protect the rights, safety, or security of ForgeLeads, our users, or the public. We do not sell your personal information or use it for third-party advertising.

6. Your choices and rights

You may:

• Disconnect Gmail at any time from your workspace email settings and revoke ForgeLeads’ access in your Google account permissions.
• Request access to or deletion of your personal data by contacting us at the email below.
• Opt out of marketing communications if we send any (we do not use your Google or Gmail data for marketing).

7. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the “Last updated” date. Continued use of the service after changes constitutes acceptance of the updated policy. For material changes, we may provide additional notice (e.g. email or in-app).

8. Contact

If you have questions about this Privacy Policy or our practices, contact us at hello@forgeleads.app.