Privacy Policy

• Account information — your name, email address, company, and role, provided when you are invited to a project or create your account.
• Project content you submit — RFIs, submittals, comments, documents, drawings, pay applications, schedule and budget entries, and any files or photos you upload.
• Photo location data— when you add a photo, the app may read location (GPS) metadata embedded in the image, or use your device’s current location, to suggest which building the photo belongs to. Location is used only to tag photos to a building within your project; it is not tracked in the background.
• Notification identifiers — if you enable push notifications, a device push token is stored so we can deliver alerts about project activity.
• Basic usage and diagnostic data — standard server logs (such as request times and error information) used to operate and secure the service.

• To provide the app’s features and show you your projects.
• To send transactional emails and push notifications about project activity (for example, a new RFI, a submittal decision, or a pay application) to the relevant recipients.
• To tag and organize photos and documents within a project.
• To secure the service, prevent abuse, and troubleshoot problems.

Project content is visible to other authorized members of the same project, according to their assigned role and access. We do not sell your information or share it for advertising. We share data only with service providers that help us run the app:

• Supabase — database, authentication, and file storage.
• Vercel — application hosting.
• Resend — transactional email delivery.
• OneSignal — push notification delivery.

These providers process data on our behalf under their own security and privacy terms. We may also disclose information if required by law.

We keep project content for as long as the project is active and as needed for our business and legal records. You can ask us to delete your account and associated personal information; some records may be retained where required by law.

Access to the app requires authentication, and project data is protected by row-level access controls so members only see the projects they are authorized for. Files are stored privately and served through expiring, signed links. No method of transmission or storage is perfectly secure, but we take reasonable measures to protect your information.

• You can turn push notifications on or off from your device settings or within the app.
• You can decline location access for photos in your device settings; the app will still work, and you can tag buildings manually.
• You can request access to, correction of, or deletion of your personal information by contacting us.

ForgeCore is intended for business use by adults and is not directed to children under 13.

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above.

Questions about this policy or your data? Contact Forge Residential Partners at mike@forgeres.com.