Privacy Policy

Last updated: October 03, 2026

1. Data Controller

The data controller for this service is:

  • Company Name: Calforge
  • Registered Address: [Company Registration Address]
  • Privacy Contact Email: privacy@calforge.tech
  • Data Protection Officer: Not applicable

2. Information We Collect

2.1 Information You Provide Directly

  • Account Information: Email address, display name, password (encrypted)
  • Payment Information: Transaction amount, payment status. We do not store full card numbers — card data is processed by our payment processor (see Section 5)
  • Communication Records: Emails, support tickets, and feedback you send to our support team
  • Profile Information: Any additional information you choose to provide in your profile

2.2 Information We Collect Automatically

  • Device and Network: IP address, device model, operating system, browser type, timezone
  • Usage Behavior: Page visits, feature usage, operation logs, session duration
  • API Usage: Request timestamps, error logs, performance data for quota management

3. How We Use Your Information

Purpose Legal Basis
Providing and maintaining the ServiceContract performance
Billing and payment processingContract performance
Customer supportContract performance / Legitimate interest
Service notifications (billing, security, policy updates)Legitimate interest
Security and fraud preventionLegitimate interest
Product optimization and analyticsLegitimate interest
Legal complianceLegal obligation
Marketing communications (optional)User consent

We may aggregate or de-identify data for statistical analysis. Such data cannot be traced to specific individuals.

4. Cookies and Tracking Technologies

Type Purpose Can be disabled
Strictly NecessaryMaintaining login, core functionalityNo
FunctionalLanguage preferences, personalized settingsYes
AnalyticsAnonymous usage statistics, product optimizationYes
Marketing (optional)Targeted advertising and performance measurementYes

We use analytics tools including [Google Analytics]. You can adjust your preferences through your browser settings or our Cookie Management Center.

5. Data Sharing and Disclosure

We do not sell your personal information, including as defined under applicable laws such as CCPA. We only share information in the following circumstances:

  • Service Providers: Cloud computing, payment processing, customer support, analytics providers — bound by confidentiality agreements. Payment card data is processed by our PCI-DSS compliant payment processors Waffo Pancake (primary) and Creem (alternative), and is not stored on our servers.
  • Business Partners: [If applicable, describe types of partnerships and data scope; otherwise delete]
  • Legal and Regulatory Requirements: As required by law, court order, or legitimate government requests
  • Business Transactions: In cases of merger, acquisition, etc., with advance notice and continued protection obligations
  • With Your Consent: For other purposes with your explicit prior consent

6. Data Security

  • Transmission Encryption: TLS/HTTPS
  • Storage Security: Sensitive data such as passwords is encrypted or hashed
  • Access Control: Principle of least privilege; employees sign confidentiality agreements
  • Regular Security Audits and Vulnerability Scans

In the event of a security incident affecting your rights, we will notify you and relevant regulators within 72 hours of discovery, as required by law. Please keep your account credentials secure and do not share them with others.

7. Data Retention

Data Type Retention Period Disposal upon Expiry
Account InformationActive period; 90 days after account deletionDelete or anonymize
Transaction RecordsAs required by law (typically 7 years)Delete or archive
Support Records3 yearsSecure deletion
Security Audit Logs12 monthsSecure deletion

8. Your Data Rights

To exercise the following rights, contact us at privacy@calforge.tech. We will process your request within 30 calendar days.

Right Description
Right to KnowUnderstand what data we collect and how we use it
Right to AccessObtain a copy of your personal data
Right to RectificationCorrect inaccurate or incomplete information
Right to ErasureRequest deletion of data under certain conditions
Right to Restrict ProcessingPause data processing under certain conditions
Right to Data PortabilityObtain your data in machine-readable format
Right to ObjectObject to processing based on legitimate interest or marketing
Right to Withdraw ConsentWithdraw consent for processing based on consent

If you believe we have not handled your data appropriately, you have the right to lodge a complaint with your local data protection authority.

9. Marketing Communications

With your consent, we may send marketing information about our products and services via email, SMS, or in-app notifications. You can unsubscribe at any time by clicking the "unsubscribe" link in emails, disabling marketing notifications in your account settings, or contacting us. Unsubscribing does not affect service-related notifications such as billing and security alerts.

10. International Data Transfers

Our servers and partners may be located in [regions such as Singapore, United States]. For cross-border transfers, we protect data through:

  • Data processing agreements incorporating EU Standard Contractual Clauses (SCC)
  • Transfers only to recipients providing equivalent protection levels
  • Other safeguards such as adequacy decisions or Binding Corporate Rules

11. Children's Privacy

This service is intended for users who are at least 18 years old. We do not knowingly collect information from users below this age. If you believe your child has provided us with personal information, please contact us immediately at privacy@calforge.tech and we will promptly delete the information.

12. Third-Party Links and Services

This service may contain links to third-party websites or integrate with third-party services. This policy only applies to information we directly collect. We are not responsible for third-party data practices. We recommend reviewing their policies before using their services.

13. Changes to This Policy

We may update this policy from time to time. For material changes, we will notify you at least 15 days in advance via email or in-app notification, and update the "Last Updated" date at the top of this page. Continued use after the effective date constitutes acceptance of the updated policy.

14. Contact Us