Privacy Notice

Who is responsible for your information

ForgeNine LLC (“ForgeNine,” “we,” “us,” and “our”) is responsible for the information described in this notice. Rob Taroncher runs ForgeNine and is the contact for privacy questions. ForgeNine determines how information collected directly through this website is used. Some service providers also process information under their own privacy notices when you interact with their services.

Information we collect

• Course waitlist information: the email address you enter to join the course waitlist.
• Inquiry information: the details you send when you contact ForgeNine, such as your name, email address, organization, and message. Earlier versions of this website had an inquiry form; records from it are kept only as described under Retention.
• Proposal and engagement information: invited email addresses, names, titles, organization details, proposal versions, access and approval events, signatures, invoices, payment status, and related audit evidence.
• Technical and security information: IP-derived rate-limit keys, request and device information available to hosting and security providers, fraud-prevention results, authentication records, and service diagnostics.
• Optional website analytics: visited route, general referrer, approximate geography, device/browser characteristics, controlled interaction labels, and a random two-hour journey identifier when you allow analytics.
• Communications: messages and records created when you contact ForgeNine or when ForgeNine sends a requested access email, a waitlist email, or a reply.

Do not submit passwords, production secrets, regulated health data, government identifiers, payment-card numbers, or other sensitive personal information when you contact ForgeNine or join the waitlist.

Data under a signed agreement and AI services

This notice covers the website, the course waitlist, inquiries, proposals, signatures, invoicing, and payment. Data a client shares under a signed agreement is handled under that agreement.

This website does not send waitlist, inquiry, proposal, signature, invoice, or payment information to AI model providers.

Sources and purposes

We collect information directly from you, from your organization or its authorized representatives, automatically from this website and its security controls, and from providers involved in a requested proposal, signature, invoice, or payment workflow.

We use it to:

• respond to inquiries;
• email waitlist members about the courses, and nothing else;
• provide secure proposal access and verify authorization;
• prepare, sign, administer, and evidence agreements;
• create and reconcile invoices and payment status;
• protect the website, prevent abuse, troubleshoot failures, and maintain audit records;
• measure public-site effectiveness after consent; and
• comply with legal, accounting, tax, security, and contractual obligations.

Browser technologies and optional analytics

ForgeNine uses Vercel Web Analytics only after you select “Allow optional analytics.” Vercel Analytics is designed without third-party analytics cookies and reports aggregated website activity. ForgeNine also creates a random journey identifier in session storage for up to two hours so consented page and funnel events can be understood as one visit. Names, email addresses, company names, inquiry text, proposal identity, payment information, and Turnstile tokens are not sent to marketing analytics.

Your analytics choice is stored in local browser storage for up to 180 days. If you decline, ForgeNine does not load the analytics component, emit custom marketing events, or create the journey identifier. Browser storage used for secure proposal sessions and privacy preferences is operational rather than advertising technology.

When information is disclosed

ForgeNine does not sell personal information, share it for cross-context behavioral advertising, or use it to build advertising profiles. We disclose only the information reasonably needed to the following categories of recipients:

• Infrastructure and storage: Vercel, Vercel Blob, and Neon.
• Email and security: Resend and Cloudflare Turnstile.
• Signature, accounting, and payment: SignWell, Xero, and Stripe when those workflows are used. ForgeNine does not directly store payment-card numbers.
• Professional and legal recipients: advisers, auditors, insurers, or authorities when reasonably necessary to protect rights, complete a transaction, or comply with law.
• Corporate transaction recipients: a successor or prospective successor in a merger, financing, reorganization, or sale, subject to appropriate confidentiality and legal protections.

Retention

ForgeNine keeps information only for the period reasonably necessary for the purpose described above, subject to legal holds, disputes, security needs, and provider backup cycles. Current operating periods include:

• the optional journey identifier: up to two hours in session storage;
• the analytics preference: up to 180 days in local storage;
• single-use access links: valid for 15 minutes, with expired records removed through operational cleanup;
• secure proposal sessions: up to eight hours;
• inquiries that do not lead to a signed agreement: removed after 12 months;
• course waitlist email addresses: removed when you ask, or within 12 months of the courses opening if you do not join; and
• contracts, signatures, invoices, payment evidence, and related audit records: generally retained for the applicable relationship plus the period required for tax, accounting, legal, security, or contractual purposes, commonly seven years.

Security

ForgeNine uses safeguards proportionate to the information and risk, including restricted administrative access, single-use access links, encryption for protected credentials and signing URLs, same-origin checks, human-verification controls, rate limits, provider webhook verification, immutable proposal versions, and audit records. No internet service can guarantee absolute security.

Your rights and choices

Depending on where you live and how applicable law treats the relationship, you may have rights to request access, correction, deletion, or a portable copy of personal information, or to object to or restrict certain processing. You may also withdraw analytics consent at any time through Privacy choices. ForgeNine does not discriminate against anyone for exercising a legally protected privacy right.

Send a request to contact@forgenine.ai. Describe the right you want to exercise and the relationship or email address needed to locate the record. ForgeNine may verify identity and authority before acting. If a request is denied, reply to the decision email with “Privacy appeal” and the reason for the appeal. We will respond within the period required by applicable law.

Authorized agents may submit requests where permitted by law, but ForgeNine may require evidence of authorization and direct identity verification. Some information may be retained where an exception applies, including to complete a contract, maintain security, preserve legal claims, or meet accounting obligations.

Children

This website is not directed to children. ForgeNine does not knowingly collect personal information from children under 13. If you believe a child submitted information, contact ForgeNine so it can be reviewed and deleted where required.

International processing

ForgeNine and its providers may process information in the United States and other countries where they operate. Privacy protections may differ by location. Where applicable law requires a transfer safeguard, ForgeNine or the relevant provider will use an approved legal mechanism.

Changes to this notice

ForgeNine may update this notice as services, providers, or legal requirements change. The effective date above will be revised. Material changes will be presented through a reasonably prominent notice when required.

Contact