Privacy Policy
Last updated 25 September 2026. Teraplex Labs Ltd is the data controller for personal data processed by Forge. Contact: contact@forge.fast.
Teraplex Labs Ltd is a company registered in England and Wales (company number 17431058), registered office 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.
1. What we collect
Account data: your email address, and — if you sign in with Google — the email address and basic profile (name, avatar) Google shares with us; we use Google sign-in data to authenticate you; separately connected Google content is accessed only when you authorise that connection. Verification data: a phone number when phone verification is required (with its carrier line type), and, for step-up checks, identity verification handled by Stripe Identity. Security signals: IP address and coarse device/browser characteristics, used for fraud prevention, abuse detection and account security. Service data: your conversations, connected projects, optional phone communications and usage records needed to run and bill the service. Payments are processed by Stripe — we receive payment status and a reference, never full card numbers.
2. Why we process it
To provide and bill the service (performance of contract); to prevent fraud and abuse of credits, referrals and verification, and to keep accounts secure (legitimate interests); to meet UK VAT, tax and accounting obligations (legal obligation); and, where we ask for it, with your consent. Development-only operator access to workspaces for debugging and product analysis is read-only and audited. We do not use your content to train AI models by default.
3. Who we share it with
Processors acting on our instructions only: Stripe (payments and identity checks), Telnyx (phone verification, calls and messages), Meta (WhatsApp messages), Amazon Simple Email Service (SES, email delivery), AI providers including Anthropic, OpenAI, Google, ElevenLabs and Deepgram (requests, responses and speech needed to provide AI and voice features), Sentry (error monitoring), and cloud infrastructure and storage providers (including DigitalOcean, Cloudflare and Wasabi). We do not sell personal data.
4. Retention
Account and service data is kept while your account is active. When you ask us to delete your account, we delete or anonymise it, except billing records we must keep for as long as tax law requires, and limited fraud-prevention records (such as hashed phone identifiers and IP activity linked to abuse) kept to prevent repeat abuse of credit programs. When you disconnect a connected account, we delete the access credentials we stored for it. We keep no more than we need for each purpose.
5. Your rights
Under UK/EU GDPR you may request access, correction, deletion, restriction, portability, or object to processing based on legitimate interests. Write to contact@forge.fast; we answer within a month. You may also complain to the UK Information Commissioner's Office (ICO).
6. International transfers
Our processors may store data outside the UK/EEA; where they do, transfers are protected by recognised safeguards such as adequacy decisions or standard contractual clauses.
7. Calls and messages
If you use phone features, we process your phone number, the numbers you contact, message content and call metadata or content needed to deliver or transcribe calls. Telnyx handles phone traffic and verification; WhatsApp messages are handled by Meta on a separate Forge business number. Agent calls disclose at the start that you are speaking with an AI. Agent-initiated calls and texts are not placed or sent during quiet hours in the time zone set on your account. We use this information to deliver and bill the service and prevent abuse. A text or email to Forge permits a reply to that sender on the same channel until you ask us to stop, including in natural language. Forge calls you only if you have turned on calls for your verified number. You can turn them off at any time, and texting us does not turn them on. Carrier STOP and HELP handling for texts is separate. Opting out of agent messages does not block the sign-in or verification codes you request. Marketing messages are sent only with separate consent; verifying your phone number or email does not sign you up for them. We do not share mobile numbers with third parties or affiliates for their marketing or promotional purposes, and we never share SMS opt-in data or consent with any third party.
8. Changes
We will post any changes here and, for material changes, notify you in the product or by email.