Privacy Notice

Who is responsible for your information

ForgeNine is an independent business operated by Rob Taroncher. In this notice, “ForgeNine,” “we,” “us,” and “our” refer to that business. ForgeNine determines how information collected directly through this website is used. Some service providers also process information under their own privacy notices when you interact with their services.

Information we collect

• Business inquiry information: name, work email, company, the workflow or business problem you describe, consent, and any optional environment or timing details.
• Proposal and engagement information: invited email addresses, names, titles, organization details, proposal versions, access and approval events, signatures, invoices, payment status, and related audit evidence.
• Technical and security information: IP-derived rate-limit keys, request and device information available to hosting and security providers, fraud-prevention results, authentication records, and service diagnostics.
• Optional website analytics: visited route, general referrer, approximate geography, device/browser characteristics, controlled interaction labels, and a random two-hour journey identifier when you allow analytics.
• Communications: messages and records created when you contact ForgeNine or when ForgeNine sends a requested access or business-response email.

Do not submit passwords, production secrets, regulated health data, government identifiers, payment-card numbers, or other sensitive personal information through the public inquiry form.

Sources and purposes

We collect information directly from you, from your organization or its authorized representatives, automatically from this website and its security controls, and from providers involved in a requested proposal, signature, invoice, or payment workflow.

We use it to:

• evaluate and respond to business inquiries;
• provide secure proposal access and verify authorization;
• prepare, sign, administer, and evidence agreements;
• create and reconcile invoices and payment status;
• protect the website, prevent abuse, troubleshoot failures, and maintain audit records;
• measure public-site effectiveness after consent; and
• comply with legal, accounting, tax, security, and contractual obligations.

Browser technologies and optional analytics

ForgeNine uses Vercel Web Analytics only after you select “Allow optional analytics.” Vercel Analytics is designed without third-party analytics cookies and reports aggregated website activity. ForgeNine also creates a random journey identifier in session storage for up to two hours so consented page and funnel events can be understood as one visit. Names, email addresses, company names, inquiry text, proposal identity, payment information, and Turnstile tokens are not sent to marketing analytics.

Your analytics choice is stored in local browser storage for up to 180 days. If you decline, ForgeNine does not load the analytics component, emit custom marketing events, or create the journey identifier. Browser storage used for secure proposal sessions and privacy preferences is operational rather than advertising technology.

When information is disclosed

ForgeNine does not sell personal information, share it for cross-context behavioral advertising, or use it to build advertising profiles. We disclose only the information reasonably needed to the following categories of recipients:

• Infrastructure and storage: Vercel, Vercel Blob, and Neon.
• Email and security: Resend and Cloudflare Turnstile.
• Signature, accounting, and payment: SignWell, Xero, and Stripe when those workflows are used. ForgeNine does not directly store payment-card numbers.
• Professional and legal recipients: advisers, auditors, insurers, or authorities when reasonably necessary to protect rights, complete a transaction, or comply with law.
• Business transaction recipients: a successor or prospective successor in a merger, financing, reorganization, or sale, subject to appropriate confidentiality and legal protections.

Retention

ForgeNine keeps information only for the period reasonably necessary for the purpose described above, subject to legal holds, disputes, security needs, and provider backup cycles. Current operating periods include:

• the optional journey identifier: up to two hours in session storage;
• the analytics preference: up to 180 days in local storage;
• single-use access links: valid for 15 minutes, with expired records removed through operational cleanup;
• secure proposal sessions: up to eight hours;
• unconverted business inquiries: removed after 12 months; and
• contracts, signatures, invoices, payment evidence, and related audit records: generally retained for the applicable relationship plus the period required for tax, accounting, legal, security, or contractual purposes, commonly seven years.

Security

ForgeNine uses safeguards proportionate to the information and risk, including restricted administrative access, single-use access links, encryption for protected credentials and signing URLs, same-origin checks, human-verification controls, rate limits, provider webhook verification, immutable proposal versions, and audit records. No internet service can guarantee absolute security.

Your rights and choices

Depending on where you live and how applicable law treats the relationship, you may have rights to request access, correction, deletion, or a portable copy of personal information, or to object to or restrict certain processing. You may also withdraw analytics consent at any time through Privacy choices. ForgeNine does not discriminate against anyone for exercising a legally protected privacy right.

Send a request to rob@forgenine.ai. Describe the right you want to exercise and the relationship or email address needed to locate the record. ForgeNine may verify identity and authority before acting. If a request is denied, reply to the decision email with “Privacy appeal” and the reason for the appeal. We will respond within the period required by applicable law.

Authorized agents may submit requests where permitted by law, but ForgeNine may require evidence of authorization and direct identity verification. Some information may be retained where an exception applies, including to complete a contract, maintain security, preserve legal claims, or meet accounting obligations.

Children

This website is directed to enterprise and professional audiences, not children. ForgeNine does not knowingly collect personal information from children under 13. If you believe a child submitted information, contact ForgeNine so it can be reviewed and deleted where required.

International processing

ForgeNine and its providers may process information in the United States and other countries where they operate. Privacy protections may differ by location. Where applicable law requires a transfer safeguard, ForgeNine or the relevant provider will use an approved legal mechanism.

Changes to this notice

ForgeNine may update this notice as services, providers, or legal requirements change. The effective date above will be revised. Material changes will be presented through a reasonably prominent notice when required.

Contact