Privacy policy
Forgeling makes AI agents you can run in three ways: Forgeling Desktop, an app that runs agents on your own computer; Forgeling Cloud, where we host agents for you (open to invited customers today); and Forgeling Core, a managed agent backend that businesses use inside their own apps. This policy explains what personal information we process across those services and this website, including when you talk to an agent we operate on WhatsApp, and the choices you have.
Who we are
Forgeling is a company incorporated in the United States. For anything about this policy or your data, write to eli@forgeling.io.
When we host or operate agents for a business (our customer), in Forgeling Cloud or through Forgeling Core, that business decides what the agents are for and who may talk to them. For the messages and data those agents handle, we act on the business's behalf, as its service provider.
Information we process
- Your Forgeling account: the name and email address of the people who create an account to buy or manage Forgeling Desktop, or to manage a Cloud workspace or a Core app.
- Desktop licenses and payments: your plan and your purchase and subscription records. Payments are processed by Stripe; Forgeling does not receive or store full card numbers.
- Linked computers: the name of each computer you link to your Desktop license, and the license checks the app sends while your agents run.
- What stays on your computer: Desktop agents, their memory, their files and their conversations stay on your computer, and we do not receive them unless you send us something yourself, for example in a support request. When a Desktop agent uses an AI model, the app sends the request directly to the provider you connected, under that provider's terms.
- Messages to agents we operate: what people send to an agent we host or operate and what it replies (text, voice notes, images and files) on any channel it is connected to, for example WhatsApp, Telegram or the web app.
- Contact identifiers: for WhatsApp, your phone number and the profile name WhatsApp shares with the business; for other channels, the equivalent identifier.
- An operated agent's working memory: notes, files and records an agent we operate keeps to do its job for the business (for example a farm's planting records), stored in that business's workspace.
- Data a business's app sends to Forgeling Core: the instructions, inputs and files the app gives its agents, and what those agents produce, processed on that business's behalf.
- Technical data: logs of requests and errors, timestamps, and update and license checks from the Desktop app, which we need to run, secure and troubleshoot our services.
- This website: if you write to us through the contact form, the details you enter, which reach us by email through Web3Forms. The site sets one functional cookie,
fg_lang, only when you choose a language, to remember that choice. It sets no advertising or tracking cookies.
How we use it
- To provide Forgeling Desktop: your account, your license, your payments and your linked computers.
- To run the agents we host or operate: receive messages, generate and send replies, and keep the context and records the business needs.
- To operate, secure, back up and fix our services.
- To answer you, and to talk to our customers about their account and our services.
We do not sell personal information, we do not use it for advertising, and we do not use your messages or your agents' data to train AI models.
Service providers
We share data only with the providers we need to deliver our services, under their own terms and data-protection commitments:
- Anthropic: the AI model behind the agents we host or operate. (Desktop requests go straight from your computer to the provider you choose.)
- Meta (WhatsApp Business Platform): delivers WhatsApp messages between you and an agent we operate.
- Google Cloud: hosts our services, the agents we operate, their storage and their backups.
- Clerk: sign-in to your Forgeling account.
- Stripe: processes Desktop payments and subscriptions.
- Web3Forms: delivers the messages sent through this site's contact form.
- Cloudflare: serves this website, its DNS and Desktop app updates.
We may also disclose information when the law requires it, or to protect the rights and safety of our users and of Forgeling.
How long we keep it
Account, license and payment records are kept while you have an account, and afterwards for as long as tax, accounting and legal obligations require. Conversation data and an operated agent's records are kept for as long as the business keeps the agent, unless the business or you ask us to delete them sooner. Data sent through Forgeling Core is kept for the periods we publish for developers, and the business's app can delete it sooner. Backups are kept for up to 30 days and then deleted. Technical logs are kept for a limited time for operations and security. Contact form messages are kept as long as we need them to answer and follow up.
Deleting your data
To have the messages and data an agent holds about you deleted, including anything received through WhatsApp, email eli@forgeling.io from the address or with the phone number involved, and tell us which business's agent you talked to. We will confirm your request, delete the data from the agent's workspace, and let backups expire within 30 days. You can also ask the business that runs the agent, and it will pass the request to us.
To close your Forgeling account and delete its data, write to us from the account's email address. We keep only what the law requires us to keep, such as payment records.
Your rights
Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, and to object to or restrict how it is used. Write to us at eli@forgeling.io and we will answer within the time the law sets.
Security
Agents we host run in isolated workspaces. Data is encrypted in transit, access is limited to the people who need it to run our services, and credentials are kept in secret stores rather than in code. Desktop agents run on your own computer, so their safety also depends on how that computer is secured. No system is perfectly secure, but we work to protect your information and will tell affected customers about a breach as the law requires.
International transfers
We and our providers process data in the United States and other countries. When we transfer data across borders, we rely on our providers' safeguards for such transfers.
Children
Our services are not directed at children under 13 (or the minimum age where you live). We do not knowingly collect their information.
Changes
We will update this page when our practices change and revise the date at the top. Significant changes will be communicated to our customers.