Privacy Policy

Last updated: 24 June 2026

1. Introduction

ForgePM is a product of AIONIQS ("we", "us", or "our"). We are committed to protecting the privacy of individuals who use our AI-powered project-management platform ("Service"). This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and what rights you have in relation to it.

This policy applies to all users of ForgePM, including visitors to our marketing website and holders of registered accounts. By using the Service you confirm that you have read and understood this policy. If you do not agree with its terms, please discontinue use of the Service.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. For users located in the European Economic Area, the EU GDPR also applies where relevant.

2. Information We Collect

Account Data

When you register for ForgePM, we collect information necessary to create and manage your account. This includes your full name, email address, password (stored in hashed form), organisation name, and subscription tier. If you sign in via a third-party OAuth provider, we receive the basic profile data authorised by that provider.

Project Data You Enter

ForgePM is a tool for managing real projects. The content you create inside the platform — including project names, descriptions, tasks, milestones, risk entries, budget figures, team member names, AI-generated documents and any other user-generated content — is stored so that you and your collaborators can access it. This data is yours; see "Your Content and Data" in the Terms of Service.

Usage Data

We automatically collect certain technical data when you use the Service, including your IP address, browser type and version, device type, operating system, pages and features visited, timestamps, referral URLs, and error logs. This information helps us maintain security, diagnose problems, and understand how the platform is used so we can improve it.

Cookies and Similar Technologies

We use cookies and similar tracking technologies. Full details are provided in Section 5 below.

3. How We Use Your Information

We use the data we collect for the following purposes:

• Providing the Service — creating and maintaining your account, processing transactions, and delivering the features of ForgePM.
• AI Features — passing relevant project context to our AI provider (Anthropic) to generate documents, summaries, and recommendations on your behalf. We transmit only the data required to fulfil each request.
• Communication — sending transactional emails (account confirmation, password reset, subscription receipts) and, where you have opted in, product updates and announcements.
• Security and Fraud Prevention — monitoring for suspicious activity, enforcing our Terms of Service, and protecting our users and infrastructure.
• Analytics and Improvement — understanding usage patterns in aggregate to improve the design, performance and feature set of ForgePM. We do not sell usage data to advertisers.
• Legal Obligations — complying with applicable laws, regulations, legal proceedings, or enforceable governmental requests.

4. Data Storage and Security

Your data is stored in Supabase (a managed PostgreSQL platform) and served via Vercel's edge network. Both providers maintain SOC 2 compliance and employ industry-standard security controls. All data transmitted between your browser and our servers is encrypted using TLS 1.2 or higher. Data at rest is encrypted using AES-256.

We implement appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, disclosure, alteration or destruction. Access to personal data within AIONIQS is restricted to personnel who require it to perform their duties and is subject to confidentiality obligations.

No method of transmission over the internet or electronic storage is completely secure. Whilst we strive to protect your data, we cannot guarantee absolute security and encourage you to use a strong, unique password for your ForgePM account.

5. Cookies

ForgePM uses cookies — small text files placed on your device — to enable core functionality and improve your experience. The categories of cookies we use are:

• Strictly Necessary — required for authentication sessions and security. These cannot be disabled without breaking the Service.
• Functional — remember your preferences such as theme settings and sidebar state.
• Analytics — help us understand how users navigate the platform. Where analytics involve third-party services, data is anonymised or pseudonymised where possible.

You can control cookies through your browser settings. Disabling cookies may affect the functionality of ForgePM. A cookie preference centre will be made available in the platform settings for non-essential cookies.

6. Third-Party Services

We work with the following sub-processors and third-party services, each of whom handles personal data only to the extent necessary to provide their services to us:

• Supabase — database and authentication infrastructure. Your project data and account credentials are stored here.
• Vercel — hosting and edge network provider. Application code and edge functions run on Vercel's infrastructure.
• Anthropic — AI model provider powering ForgePM's AI generation features. Project context submitted to AI features is processed by Anthropic's API. Please refer to Anthropic's Privacy Policy for details of how they handle API data.
• Stripe — payment processing. Stripe handles all payment card data; we do not store card numbers on our servers. Stripe is PCI DSS Level 1 certified.
• Resend — transactional email delivery. Your email address is shared with Resend solely for the purpose of delivering emails from ForgePM.

We require all sub-processors to maintain appropriate data protection standards and we have data processing agreements in place with each of them where required by law.

7. Your Rights

Under UK GDPR and EU GDPR, you have the following rights in relation to your personal data:

• Access — request a copy of the personal data we hold about you.
• Rectification — request correction of inaccurate or incomplete data.
• Erasure — request deletion of your personal data, subject to any legal obligations that require us to retain it.
• Portability — receive a structured, machine-readable copy of data you have provided to us.
• Restriction — request that we restrict processing of your data in certain circumstances.
• Objection — object to processing based on legitimate interests or for direct marketing purposes.
• Withdrawal of Consent — where processing is based on consent, withdraw it at any time without affecting prior processing.

To exercise any of these rights, please contact us at privacy@forgepm.aioniqs.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) in the United Kingdom.

8. Data Retention

We retain your account data and project data for as long as your account remains active. If you delete your account, we will delete or anonymise your personal data within 90 days, except where we are legally required to retain certain records (for example, financial records for tax compliance, which are retained for 7 years in accordance with UK law).

Usage and analytics data may be retained in anonymised or aggregated form indefinitely, as it can no longer be attributed to an individual.

9. Children's Privacy

ForgePM is intended for use by professionals and businesses. The Service is not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16. If we become aware that we have inadvertently collected data from a child under 16, we will delete it promptly. If you believe a child has provided us with personal information, please contact us at privacy@forgepm.aioniqs.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by email (to the address on your account) and by displaying a prominent notice in the platform. The updated policy will take effect 14 days after notification unless you object before then. Your continued use of the Service after the effective date constitutes acceptance of the revised policy.

The "Last updated" date at the top of this page indicates when the policy was most recently revised. We encourage you to review this page periodically.

11. Contact

If you have any questions, concerns or requests relating to this Privacy Policy or the way we handle your personal data, please contact our privacy team at:

Email: privacy@forgepm.aioniqs.com
Company: AIONIQS