Privacy Policy

1. Scope

This Privacy Policy explains how GForge Group, Inc. (“GForge,” “we,” “us,” or “our”) collects, uses, and protects information in connection with our website (gforge.com) and our GForge software products and services, including our self-hosted and SaaS offerings (collectively, the “Services”).

If you use GForge as a self-hosted, on-premises, or air-gapped deployment, this policy does not apply to data you store within your own environment — that data remains entirely under your control. See Section 6 for details.

2. Information We Collect

• Account Information — name, email address, and other information you provide when you create an account, request a demo, or contact us.
• Usage Data — information about how you interact with our website and SaaS product, such as log data, feature usage, and device or browser information.

We do not sell your personal information, and we do not collect more than what’s needed to operate your account and the Services.

3. How We Use Information

• To provide, operate, and maintain the Services
• To create and manage your account
• To respond to inquiries and provide support
• To send product and service updates — you may opt out of these at any time via the unsubscribe link included in each message
• To maintain the security and integrity of our Services
• To comply with legal obligations

4. Cookies & Tracking

We use only the cookies necessary for the GForge SaaS platform to function, such as maintaining your login session. We do not use cookies for advertising or behavioral tracking, and we do not sell or share any tracking data with third parties.

5. Third-Party Service Providers

We do not share, sell, or disclose your personal information to third parties, except:

• Service providers who process data solely on our behalf to operate our website and Services, under obligations consistent with this policy. Currently, this includes Amazon Web Services (AWS), which hosts our SaaS platform, our website infrastructure, and our internally-developed customer relationship management (CRM) system.
• Disclosures required by law, such as in response to a valid legal process.

We do not use any third-party advertising, analytics, or marketing platforms that share or sell your data.

6. Data Retention & Security

• Self-Hosted Deployments — if you use GForge as a self-hosted, on-premises, or air-gapped deployment, your data resides entirely within your own environment. Data retention and security for self-hosted deployments are managed solely by you; GForge does not have access to or control over this data.
• SaaS Deployments — for customers using our hosted SaaS platform, we retain your data for the duration of your active contract. Upon termination of a contract, we remove the projects and data associated with that contract within 30 days.

We use commercially reasonable technical and organizational measures, including those provided by AWS’s infrastructure, to protect information we hold.

7. Your Rights and Choices

• Personal Account Information — you may request access to, correction of, or deletion of your personal account information (such as your name or login email) at any time by contacting us.
• Customer/Project Data — data associated with a customer account, such as project content, is governed by the applicable contract between GForge and the customer organization, not by individual request, and follows the retention terms described in Section 6.
• Communication Preferences — you may opt out of product and service update emails at any time using the unsubscribe link in those messages.
• Organizational End Users — if you access GForge as an end user through your employer’s or organization’s account, your organization controls that data as our customer. Please contact your organization’s administrator first regarding data associated with their account.

8. International Users

Our Services are hosted on infrastructure provided by AWS, which may process data in multiple regions. [Note for legal review: confirm specific AWS region(s) and any data-residency commitments applicable to specific customer contracts.]

9. Children’s Privacy

Our Services are intended for business use and are not directed to individuals under the age of 16. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated “Last Updated” date below.

11. Governing Law

This Privacy Policy is governed by the laws of the State of Iowa, USA, without regard to its conflict of law principles.

12. Contact Us

Questions about this policy or your data can be sent through our Contact page.

Last updated: August 1, 2026