At Forge, we take your privacy seriously. This Privacy Policy explains how Forge Development Studio collects, uses, and protects your personal information when you visit forgedev.studio, use Forge Voice (the AI receptionist), or use any custom-built software Forge ships for you.
Information We Collect
We collect information you provide directly to us, such as when you fill out a contact form, run our free website audit, request a quote, or subscribe to our newsletter. This may include your name, email address, phone number, company name, and project details.
Signing in to Forge Voice. When you sign in to your Forge Voice dashboard or app, we email you a one-time code and keep a record of that sign-in: your email address, the business, whether you are the owner or a team member, when you signed in and when you last used it. If you turn on alerts in the app, we keep your phone's notification address with your email. A sign-in ends after 30 days without use, after 180 days at most, or when you sign out. We delete the record of a sign-in, and the phone's notification address that came with it, within two days after the sign-in ends, and all of them when we delete the business's data.
How We Use Your Information
We use the information we collect to run, support and secure our services, communicate with you about your project, and send you updates or marketing materials if you have opted in.
Calls to our line
When you call (706) 981-6655 or talk to our agent in your browser, an AI assistant answers. We record the call and make a written transcript. Our voice, phone and AI providers (ElevenLabs, Twilio, Anthropic) process it to run the call. Anthropic's model also reads the transcript to pull out the contact details you gave, so we can follow up.
Calls your Forge Voice agent answers
If you call a business that uses Forge Voice, an AI assistant answers and says so. We record the call and write a transcript. We do this for the business you called. That business decides how it uses what you said. We also use the call to run and protect the service and to check that our rules are followed. ElevenLabs, Twilio, Anthropic and Google Cloud process the call for us. Our email provider sends the business a summary. We do not sell it. To see or delete a call, ask the business you called. You can also email privacy@forgedev.studio and we will pass your request to that business.
Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.
Third-Party Services
We use these service providers to run the site and our services. They have their own privacy policies, which we encourage you to review. We only share the minimum data necessary with each provider to operate our services.
- ElevenLabs: voice AI for calls and the browser demo
- Twilio: phone numbers, calls and text messages
- Anthropic: AI language models that run conversations and text replies, and pull contact details out of calls to our own line
- Google: Google Analytics to count visits, and Gemini AI models
- Stripe: payments and subscriptions
- Resend: email delivery
- Cloudflare: website delivery and security
- Firebase and Google Cloud: hosting, data storage and server functions
- HighLevel: our contact list, used to follow up on requests
- esm.sh: serves the code that runs our browser demo
AI Voice Widget and TCPA Consent Records
When you send the form that opens our AI agent, we keep a record that you agreed to our Terms and Privacy Policy. We keep the words shown, the page and the time. We keep that record for 4 years.
SMS Messaging and 10DLC
We send a small number of text messages: replies when you text us, a link or a booking confirmation you asked for on a call, and alerts a partner turned on. Our SMS Policy page lists every kind and how you agree to it. Our texting is registered for business use. We do not send marketing texts, and we do not text Forge Voice call summaries today.
We do not sell phone numbers. We do not share phone numbers or text message consent with anyone for their marketing. Reply STOP to stop texts, or email support@forgedev.studio.
Your Rights
You have the right to access, correct, export, or delete your personal data, including phone numbers, email addresses, and any account data. To exercise any of these rights, email support@forgedev.studio. We respond within 30 days.
If you are a Forge Voice customer, the account owner can download your calls, recordings and transcripts in your account. After your plan ends the owner can delete them there too. For calls to a business that uses Forge Voice, see Calls your Forge Voice agent answers.
Cookies and Tracking
We use cookies and similar technologies on forgedev.studio to keep the site functional, measure traffic, and (with consent) improve marketing. We group them into three categories:
- Essential: required for the site to work, including session, security, and load balancing. Always on.
- Analytics: We use Google Analytics to count visits. It sets cookies when a page loads. You can turn it off with the Cookies link or in your browser. If you choose Essential only, we remove the Google Analytics cookies and stop sending it anything from your browser.
- Marketing: We do not set any marketing cookies today. If that changes, they will only be set if you accept.
You can make your choices on the cookie bar shown on your first visit, and change them at any time with the Cookie settings link at the bottom of every page. Your preferences are stored locally under forge_cookie_consent_v1. You can also control cookies through your browser settings, though blocking essential cookies may prevent parts of the site from working. If you use the form that opens our AI agent, your browser keeps the name, email and phone number you typed for 30 days. When you start a conversation, we give them to the agent so it does not ask again. Your browser also keeps a note that you closed our prompt. Neither is a cookie.
How you found us. When you send us one of the forms on this site, such as the free audit, saving a site you built with it, a Voice demo request, or the form that opens our AI agent, the form can include a note of how you found this site, such as a search engine, a social post, or a link we shared, along with the first page you visited and whether you were on a phone or a computer. That note is kept in your own browser until you send a form, and it is not a cookie. We keep it with that request to learn which places actually help local businesses find us. It never includes your IP address or an ad click ID, and it is not used to follow you on other sites.
California Privacy Rights (CCPA / CPRA)
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives you the following rights:
- Right to know: request the categories and specific pieces of personal information we have collected about you, the sources, the business purposes for collecting or sharing it, and the categories of third parties with whom we share it.
- Right to delete: request deletion of personal information we have collected about you, subject to limited exceptions (for example, to complete a transaction, detect fraud, or comply with law).
- Right to correct: request correction of inaccurate personal information we maintain about you.
- Right to opt out of sale or sharing: Forge does not sell personal information for money. We do not share personal information for cross-context behavioral advertising unless you have opted in through the cookie consent banner. You may change your choice at any time.
- Right to limit use of sensitive personal information: you may direct us to limit use of sensitive PII to what is necessary to provide the requested Service.
- Right to non-discrimination: we will not deny you services, charge different prices, or provide a different quality of service because you exercised a privacy right.
To exercise any of these rights, email privacy@forgedev.studio with the subject line "CCPA Request." We will verify your identity using reasonable measures (typically by matching the email on your account) before fulfilling the request. Authorized agents may submit requests with written permission and identity verification. We respond within 45 days and may extend once by an additional 45 days where reasonably necessary, with notice.
European Privacy Rights (GDPR / UK GDPR)
If you are in the European Economic Area, the United Kingdom, or Switzerland, the General Data Protection Regulation gives you the following rights with respect to your personal data:
- Right of access: obtain confirmation of whether we process your personal data and receive a copy.
- Right to rectification: have inaccurate or incomplete personal data corrected.
- Right to erasure: request deletion where the data is no longer necessary, you withdraw consent, or the processing was unlawful.
- Right to restrict processing: ask us to pause processing in specified circumstances.
- Right to data portability: receive personal data you provided in a structured, commonly used, machine-readable format, or have it transmitted to another controller where technically feasible.
- Right to object: object to processing based on our legitimate interests or for direct marketing.
- Right to withdraw consent: where processing is based on consent (for example, marketing cookies), withdraw at any time without affecting prior lawful processing.
- Right to lodge a complaint: with your local supervisory authority. For UK residents, that is the Information Commissioner's Office (ico.org.uk). For EU residents, the authority in the member state of your residence, place of work, or alleged infringement.
Our legal bases for processing include contract performance (to deliver the Services you request), legitimate interests (to secure, improve, and market our products), consent (for analytics and marketing cookies and for email marketing), and legal obligation (for tax, accounting, and compliance records).
International Data Transfers
Forge is in the United States and keeps data on servers in the United States. We sell to businesses in the United States. If you are outside the United States, your information is processed here.
Data Retention
We keep personal data only as long as necessary for the purposes described in this policy, unless a longer period is required by law.
- Forge Voice calls, recordings, transcripts and settings: kept while your plan is active, and recordings and transcripts for up to 24 months. Kept for 90 days after your plan ends, then deleted. You can download a copy at any time. After your plan ends you can delete everything sooner in your account.
- Calls to our own line and browser demo: kept until you ask us to delete them.
- Contact, audit and demo requests: kept until you ask us to delete them.
- Billing and tax records: kept for 7 years.
- Consent records for calls and texts: kept for 4 years.
- Security logs: kept for up to 13 months.
- Marketing contacts: kept until you unsubscribe or ask us to delete them.
- Backups: deleted data can stay in our backups for a time after we delete it.
What we cannot delete: call summary emails we already sent you, our phone provider's own call logs (numbers and lengths, no audio), and our payment provider's billing records.
Privacy contact
To raise a privacy concern, submit a rights request, or ask a question about this policy, email privacy@forgedev.studio. We respond to all verifiable requests within the timeframes required by the applicable law (typically 30 days under GDPR, 45 days under CCPA).
Contact Us
If you have any questions about this Privacy Policy, please contact us at support@forgedev.studio.