Privacy policy

Draft placeholder. This page is not legal text yet. Replace every highlighted item and have the whole page reviewed before launch.

Who is responsible

[Controller name, address and contact email]. [Data protection officer, if appointed].

This website

forgeqa.io sets no cookies and uses no analytics or tracking. Our server processes your IP address and request details to deliver the page and keep it secure. [Server log retention period].

The Forge QA app

• Account: email address, a password hash, workspace and team membership. Sign-in uses one strictly necessary session cookie.
• Identity check: Stripe collects the ID document and selfie. We store only the verification status and reference, not the images.
• Billing: handled by Stripe, including card details, billing address and tax ID.
• Tests and evidence: your test steps, plus screenshots, videos, traces and network/console logs from your runs. Evidence is kept for 7 days. Logs remove query strings, request bodies and known secrets; screenshots and videos show whatever your site displays.
• Email: sign-in codes, invitations and alerts are sent through Resend.
• AI drafting (optional): when you use it, your description and the visible content of the inspected page are sent to OpenRouter and the selected model provider.
• Integrations (optional): Slack, Jira Cloud or your webhook receive run results only after you connect them.

Processors

Stripe (payments, identity), Resend (email), OpenRouter (AI drafting), [hosting provider and location, e.g. Hetzner Online GmbH, Germany]. [Legal bases, international transfer safeguards and DPAs].

Retention

[Retention periods for account, billing and audit data, and deletion on account closure]

Your rights

You can request access, correction, deletion, restriction, portability, or object to processing (GDPR Articles 15–21), and complain to a supervisory authority. [Responsible supervisory authority]. Contact [privacy email].