Last updated: March 2026
FORGE is a trading name operated by Andy Riley, Hull, England. For the purposes of UK data protection law (UK GDPR), Andy Riley trading as FORGE is the data controller for personal data collected through the FORGE platform and landing page.
Contact: hello@forgenow.io
We collect the following categories of data:
| Data Type | What It Includes | Why We Collect It |
|---|---|---|
| Account data | Email address, business name, trade type, location | To create and manage your account |
| Job data | Job descriptions, uploaded drawings and documents, client names, project details | To generate AI-powered quotes |
| Quote data | Generated cost breakdowns, confidence scores, estimator comments, win/loss outcomes | To provide the service and improve accuracy over time |
| Profile data | Labour rates, margin preferences, in-house capabilities | To personalise quote outputs to your business |
| Payment data | Billing information processed via third-party payment provider | To process subscription payments where applicable |
| Usage data | Pages visited, features used, time on site | To understand how the product is being used and improve it (via Vercel Analytics) |
We do not collect sensitive personal data such as health information, financial account details beyond what is needed for billing, or any data about individuals other than the users of the platform.
We use the data we collect to:
We do not sell your data to third parties. We do not use your data for advertising purposes.
Under UK GDPR, we rely on the following legal bases for processing your personal data:
When you submit a job for quoting, your job description, uploaded documents, and profile data are sent to the Anthropic API (Claude) for processing. Anthropic processes this data to generate the quote output. This data is not used by Anthropic to train their models — it is processed solely for the purpose of generating your quote response.
Anthropic's privacy policy is available at anthropic.com/privacy.
Please do not upload documents containing sensitive personal data about third parties — for example, documents containing personal details about individuals. Only upload commercial documents relevant to the job being quoted.
Your data is stored on Supabase, a cloud database provider. Supabase infrastructure is hosted on AWS and complies with SOC 2 Type II security standards. Uploaded files are stored in Supabase Storage with access controls tied to your account.
We implement reasonable technical and organisational measures to protect your data including encrypted connections (HTTPS), access controls, and secure API key management. No system is completely secure and we cannot guarantee absolute security, but we take data protection seriously and will notify you promptly in the event of a data breach that affects your personal data.
We retain your data for as long as your account is active. If you close your account or request deletion, we will remove your personal data within 30 days, except where we are required to retain it for legal or regulatory reasons.
Anonymised and aggregated data — for example, aggregate pricing patterns that do not identify individual users or businesses — may be retained indefinitely for the purpose of improving the platform.
We share your data with the following third parties only where necessary to provide the service:
We do not share your data with any other third parties, including advertisers, data brokers, or marketing companies. We will share data with law enforcement or regulatory authorities only where required by law.
Under UK GDPR you have the following rights regarding your personal data:
To exercise any of these rights, contact us at hello@forgenow.io. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
FORGE uses essential cookies only — specifically, a session cookie to keep you logged in and a cookie to remember that you have passed the alpha access password gate. We do not use advertising cookies or third-party tracking cookies.
Because we only use strictly necessary cookies, we do not display a cookie consent banner. If this changes we will update this policy and add appropriate consent mechanisms.
Some of our third-party providers — including Anthropic, Supabase, and Vercel — operate infrastructure in the United States. Where data is transferred outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements, including reliance on Standard Contractual Clauses where applicable.
We may update this privacy policy from time to time. Where changes are material, we will notify you by email. The date at the top of this page shows when the policy was last updated. Continued use of FORGE after changes are posted constitutes acceptance of the updated policy.
Privacy Questions or Requests
For any questions about this privacy policy, or to exercise your data rights, contact us at hello@forgenow.io. We aim to respond to all privacy requests within 30 days.