Privacy Policy

1. Scope

This Privacy Policy explains how ForgeOne CRM LLC collects, uses, discloses, and protects information when you use ForgeOne™, visit ForgeOne pages, create an account, join a company workspace, communicate with support, or interact with customer-facing links generated through the platform.

2. Information we collect

Account and company information

We collect names, email addresses, login credentials, company names, contact details, roles, permissions, branding, and subscription or billing information.

Customer and operational data

Users may submit customer contacts, property addresses, leads, opportunities, jobs, insurance and claim details, estimates, contracts, invoices, payments, production schedules, messages, photos, files, signatures, and other business records.

Usage and technical information

We may collect login activity, feature usage, audit events, support requests, IP addresses, browser and device information, session identifiers, push-notification registration data, error logs, and performance data.

Mobile device permissions

On supported mobile devices, ForgeOne may request access only when a related feature is used: foreground location for property verification, mapping, field work, storm intelligence, or route planning; the camera for document scanning and jobsite or inspection capture; the microphone for user-initiated Camera + Voice inspection narration; the photo library or system photo picker for files you choose to attach; and notifications for operational alerts you choose to receive. ForgeOne does not request background location access in the current mobile app.

3. How we use information

• Provide, operate, secure, and maintain ForgeOne.
• Authenticate users and enforce organization roles and permissions.
• Generate documents, reports, customer portals, emails, and workflow records requested by users.
• Provide support, investigate errors, and respond to feedback.
• Prevent fraud, abuse, unauthorized access, and security threats.
• Analyze performance and improve product reliability and usability.
• Comply with legal obligations and enforce applicable agreements.

4. Organization control and multi-tenant separation

ForgeOne separates company workspaces by organization. Authorized administrators within an organization control membership and may access, manage, export, or delete information in that workspace according to their permissions.

If your account is provided by an employer or another organization, that organization may control your ForgeOne access and the records you create. Questions about its internal privacy practices should be directed to that organization.

5. How information may be shared

We may share information with service providers that help us host, store, secure, email, process payments, monitor, support, or operate ForgeOne. Those providers receive information only as needed to perform services for us.

Information may also be shared at a user’s direction, including through document review links, customer portals, invitations, exports, email delivery, integrations, or records made visible to customers and business partners.

We may disclose information when required by law, legal process, or a valid government request; to protect rights, safety, and security; or as part of a merger, financing, acquisition, or sale of assets subject to appropriate safeguards.

We do not sell personal information for money.

6. SMS and mobile messaging

When you voluntarily opt in to receive text messages from ForgeOne CRM LLC, we may use the mobile number you provide to send account and service communications, customer support messages, reminders, status updates, invoice and payment notifications, document links, and other requested service-related communications. Message frequency varies based on account activity, requested services, and your interactions with ForgeOne. Message and data rates may apply. You may reply STOP to opt out or HELP for assistance.

Mobile information, including mobile phone numbers, SMS or MMS opt-in data, and messaging consent, will not be sold, rented, transferred, or shared with third parties or affiliates for their marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with third parties except service providers acting on our behalf solely as necessary to enable and deliver the messaging service, or when disclosure is required by law.

Consent to receive text messages is optional and is not a condition of purchasing or using ForgeOne services.

7. Data retention

We retain information for as long as reasonably necessary to provide ForgeOne, maintain business and audit records, comply with law, resolve disputes, enforce agreements, and protect the service. Retention may vary by data type, plan, account status, legal requirement, and organization instruction.

Deleted information may remain temporarily in backups or logs before secure deletion or overwriting.

8. Account deletion

ForgeOne users may delete their user account directly from Settings → My Profile. A web-based deletion path is also available at forgeonecrm.com/account-deletion for users who no longer have the app installed.

Deleting a user account removes or de-identifies the user’s ForgeOne profile identity and removes authentication credentials, active sessions, passkeys, push-notification registrations, organization memberships, and other personal account-access records. The deleted login email may later be used to create a new ForgeOne account, but that new account is a separate identity.

Customer, project, financial, insurance, document, production, audit, and other records entered into a company workspace may be controlled by that organization rather than by the individual user. Those company-owned records are not automatically erased when an employee or other individual deletes a user login. ForgeOne may retain such records, with the deleted user de-identified where practicable, when reasonably necessary for legitimate business records, security, fraud prevention, legal obligations, dispute resolution, or audit integrity.

9. Security

We use administrative, technical, and organizational safeguards designed to protect information, including authentication, role-based access, organization-scoped data controls, private file storage, and secure transmission. No system can guarantee absolute security, and users are responsible for protecting credentials and managing access appropriately.

10. Cookies and session technologies

ForgeOne uses session cookies and similar technologies necessary to keep users signed in, protect accounts, remember preferences, and operate application features. Browser settings may allow you to block cookies, but essential functions may stop working.

11. Your choices and rights

You may update certain account and company information in ForgeOne. Organization administrators may manage members and company records. Depending on applicable law, you may have rights to request access, correction, deletion, or a copy of personal information.

Requests should be sent to admin@forgeonecrm.com. We may need to verify identity and coordinate with the organization that controls the workspace.

12. Children

ForgeOne is a business service and is not directed to children under 13. We do not knowingly collect personal information directly from children for their own use of the service.

13. Changes and contact

We may update this Privacy Policy as ForgeOne, legal requirements, or data practices change. Material updates may be presented in the application. The effective date above identifies the current version.

Privacy questions may be sent to admin@forgeonecrm.com.