Forge helps tradespeople invoice, quote and keep records. This policy explains what personal information we handle and why. Forge is the data controller for your account. If you have any questions, email us at [email protected].
Account details: your name, email address and password (your password is handled by our authentication provider and we never see it in plain text).
Business details you add: your business name, address, VAT number, payment terms and logo.
The information you enter to run your business: your customers’ names and contact details, invoices, quotes, expenses, receipt photos and mileage.
Payment information: handled entirely by Stripe. We do not see or store your card number.
Basic technical data needed to run the app reliably (for example, sign-in sessions and error logs).
When you add a customer or create an invoice, you decide what is stored and why — so for that information you are the data controller and Forge acts as your processor, handling it only to provide the service to you.
You are responsible for having a lawful reason to hold your customers’ details and for responding to any requests they make about their data.
To provide and run the service — creating and storing your invoices, quotes, expenses and customer records.
To take payment for your subscription (via Stripe).
To send you important service messages (for example, about your account or billing).
To provide support and to keep the service secure and reliable.
To meet our legal and tax obligations.
Our lawful bases are: performing our contract with you; our legitimate interests in running and improving Forge; your consent where it is needed; and compliance with legal obligations.
When you use receipt scanning or AI assistance, the relevant content — such as the receipt photo or the text of a job note — is sent to our AI provider, Anthropic, to produce the result.
This content is used only to provide that feature to you. It is not used to train AI models.
AI results can be wrong or incomplete, so always check them before you rely on them.
We do not sell your personal information. We share it only with the trusted providers that make Forge work:
We may also disclose information if the law requires it.
Some of these providers may process data outside the UK. Where they do, we rely on appropriate safeguards (such as UK/EU Standard Contractual Clauses) to keep your information protected.
We keep your information for as long as your account is active and for as long as we need it to provide the service or to meet legal and tax obligations. You can ask us to delete your account and data at any time.
Your data is encrypted in transit and at rest, and access is restricted at the database level so that only your account can see your business’s information.
Under UK data protection law you have the right to access, correct, delete, restrict or object to our use of your personal data, and to ask for a copy in a portable format. Where we rely on consent, you can withdraw it at any time.
To exercise any of these, email [email protected].
If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk.
We use essential storage on your device to keep you signed in and to make the app work. We do not use third-party advertising cookies.
Forge is a business tool intended for adults (18 or over) and is not directed at children.
We may update this policy from time to time. When we do, we will change the date at the top and, for significant changes, let you know in the app.
Questions about this policy or your data? Email [email protected]. Data controller: Forge.