Privacy Policy

1. Who we are

Forgekite is operated by Peakure LLC (“we”, “us”, “our”). We build AI-powered collections software that helps businesses collect overdue invoices. Our registered address is available upon request at privacy@forgekite.com.

2. What data we collect

We collect the following categories of data:

• Account data: your name, email address, company name, and password (hashed, never stored in plaintext).
• Billing data: subscription status, billing address, and payment method type (card brand, last 4 digits). Full card numbers are processed by Stripe and never stored by us.
• Invoice and debtor data: invoice amounts, due dates, debtor names and email addresses, which you provide or import from your accounting platform.
• Usage data: pages visited, features used, and timing data, collected via Vercel Analytics and PostHog.
• Communication data: email open and click events from collection reminders you send via Forgekite.

3. How we use your data

• To provide and improve the Forgekite service.
• To send transactional emails (account confirmation, subscription receipts).
• To run AI-powered collections reminders on your behalf.
• To analyze product usage and improve the service.
• To comply with legal obligations.

We do not sell your data. We do not use your invoice or debtor data to train shared AI models without your explicit consent.

4. Who we share data with

• Supabase — database and authentication (US servers).
• Stripe — payment processing. Subject to Stripe's Privacy Policy.
• Resend — transactional email delivery.
• Twilio — SMS delivery (when SMS escalation is enabled).
• Anthropic — AI text generation for collection reminders. Invoice content may be sent to Anthropic's API. Anthropic's API does not train models on API inputs by default.
• Vercel — hosting and edge delivery.

We do not share your data with any other third parties without your consent, except as required by law.

5. Data retention

We retain your data for as long as your account is active. When you close your account, we delete your personal data within 30 days, except where retention is required by law (e.g., billing records for 7 years).

6. Your rights

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data (right to erasure / right to be forgotten).
• Export your data in a portable format.
• Object to processing of your data for direct marketing.

To exercise any of these rights, email privacy@forgekite.com. We will respond within 30 days.

7. Cookies

We use essential cookies for authentication (Supabase session cookies) and analytics cookies (PostHog, Vercel Analytics). We do not use advertising or tracking cookies. You can disable cookies in your browser, but this will prevent login.

8. Security

All data is encrypted in transit (TLS 1.3) and at rest (AES-256). We enforce row-level security on our database so each user can only access their own data. We do not store credit card numbers.

9. Children

Forgekite is not directed at children under 16. We do not knowingly collect data from children.

10. Changes to this policy

We may update this policy. We will notify you by email and update the “Last updated” date at the top. Continued use of Forgekite after changes constitutes acceptance.

11. Contact

Questions about this policy: privacy@forgekite.com