Privacy Policy

1.1 Information We Collect

Forj collects specific categories of information necessary to deliver and operate our digital services:

• ▸ Account Information: Name, email address, company details, and billing address provided during registration.
• ▸ Content You Upload: Images, documents, files, CAD data, and metadata provided directly to our services.
• ▸ Usage Data: Platform interaction metrics, activity timestamps, IP addresses, browser specs, and device telemetry.
• ▸ Payment Information: Processed via PCI-compliant third-party providers (Forj does not store full credit card details).

1.2 How We Use Your Information

Your information is processed strictly for legitimate operational purposes:

• ▸ Deliver, maintain, and enhance platform functionality and digital asset processing.
• ▸ Execute AI pipeline operations, image synthesis, and automated content generation.
• ▸ Dispatch transactional emails, system updates, billing receipts, and security notices.
• ▸ Comply with legal obligations, prevent fraudulent activities, and maintain system security.

1.3 AI Processing and Third-Party Integrations

Forj utilizes artificial intelligence tools and cloud infrastructure to power our custom workflows. Uploading content to Forj constitutes consent for data processing via these automated pipelines. Content processed through AI integrations remains subject to our sub-processors’ respective privacy terms.

1.3.1 Sub-Processors and Data Handling

To deliver specialized AI features, Forj integrates with trusted sub-processors. You are responsible for reviewing each provider’s policies before utilization:

1.4 Data Retention Policy

We retain data strictly for the period necessary to fulfill service delivery and legal compliance:

To request complete deletion of your account and associated assets, email brendan@forj.co.za. Tax and legal billing history may be retained as mandated by South African tax authorities.

1.5 Data Security

Forj deploys enterprise-grade security controls across leading global infrastructure (AWS, Cloudflare, Vercel), utilizing end-to-end TLS encryption in transit and AES-256 encryption at rest. While we maintain rigorous defensive measures, no internet transmission method is guaranteed 100% secure.

2.1 GDPR & International Data Transfer

Forj operates globally. European Union residents acknowledge that data may be transferred, stored, and processed outside the EEA under Standard Contractual Clauses (SCCs). We adhere strictly to core GDPR principles including lawful processing, data minimization, and purpose limitation.

2.2 Your Data Subject Rights

Regardless of location, users maintain full rights to manage their personal data:

• ▸ Request access to all personal data held by Forj.
• ▸ Request immediate correction of incomplete or inaccurate information.
• ▸ Request complete erasure (“Right to be Forgotten”) subject to statutory retention limits.
• ▸ Object to or restrict specific automated processing activities.

Submit data requests directly to brendan@forj.co.za.

2.3 CCPA & CPRA Compliance (California Residents)

Under the California Consumer Privacy Act (CCPA) and CPRA, California residents hold explicit statutory rights including the Right to Know, Right to Delete, Right to Correct, and Right to Non-Discrimination.

Forj does not sell, rent, or trade personal information to third parties for monetary or valuable consideration. Verified requests will be addressed within 45 days.

2.4 POPIA Compliance (South Africa)

Forj fully complies with the Protection of Personal Information Act (POPIA) of South Africa. Personal information is gathered lawfully, stored securely, and processed solely for specified business functions. South African data subjects may exercise access and correction rights through our direct privacy contact.

2.5 SaaS Platform Data Ownership

You retain sole ownership of all raw data and assets uploaded to Forj SaaS platforms. Forj maintains full ownership of platform software, proprietary algorithms, custom AI pipelines, and platform design.

By using our platforms, you grant Forj a non-exclusive worldwide license to process data strictly for operating and maintaining the service. You warrant that all uploaded content complies with applicable data laws and does not violate third-party rights.

Forj uses essential cookies and localized storage session tokens to:

• ▸ Maintain active user sessions and secure authentication.
• ▸ Store user interface preferences (such as Dark/Light mode selection).
• ▸ Analyze aggregated usage patterns to optimize web experience and site performance.
• ▸ Detect malicious traffic and prevent unauthorized system abuse.

You can modify cookie preferences through browser settings. Disabling cookies may affect system functionality and login persistence.

For privacy enquiries, POPIA/GDPR requests, or compliance notices, please contact our Data Officer: