ProForge, Inc. ("ProForge," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at www.getproforge.com (the "Site") and use our software services (the "Services").
1. Information We Collect
1.1 Personal Information You Provide
We collect information you voluntarily provide, including:
- Account Information: Name, email address, phone number, company name, and job title when you create an account or request a demo.
- Payment Information: Billing address and payment method details processed through our secure payment processor (Stripe). We do not store full credit card numbers on our servers.
- Communications: Information you provide when contacting us through email, contact forms, or support requests.
- Business Data: Payroll, employee, project, and compliance data you enter into our Services to manage your construction business operations.
1.2 Automatically Collected Information
When you access our Site or Services, we automatically collect certain information:
- Device Information: IP address, browser type, operating system, and device identifiers.
- Usage Data: Pages visited, time spent on pages, click patterns, and features used.
- Cookies and Similar Technologies: See our Cookie Policy for details.
1.3 Information from Third Parties
We may receive information from:
- Payment processors (transaction confirmations)
- Analytics providers (aggregated usage data)
- Marketing partners (lead information with your consent)
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our Services
- Process transactions and send related information
- Send administrative messages, updates, and security alerts
- Respond to your comments, questions, and customer service requests
- Send marketing communications (with your consent where required)
- Monitor and analyze trends, usage, and activities
- Detect, investigate, and prevent security incidents and fraud
- Comply with legal obligations, including Davis-Bacon Act requirements
- Personalize and improve your experience
3. How We Share Your Information
We may share your information with:
3.1 Service Providers
Third-party vendors who perform services on our behalf, including payment processing (Stripe), cloud hosting (Supabase, Vercel), email delivery, and analytics (Google Analytics).
3.2 Legal Requirements
We may disclose information if required by law, court order, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
3.3 Business Transfers
In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
3.4 With Your Consent
We may share information with third parties when you consent to it.
We do not sell your personal information.
4. Data Retention
We retain your information for as long as your account is active or as needed to provide you Services. We also retain and use your information as necessary to comply with legal obligations (including Davis-Bacon recordkeeping requirements, which may require retention for 3 years), resolve disputes, and enforce our agreements.
5. Data Security
We implement appropriate technical and organizational security measures to protect your information, including:
- Encryption of data in transit (TLS 1.3) and at rest (AES-256)
- Regular security assessments and penetration testing
- SOC 2 Type II compliance
- Role-based access controls
- Regular backups and disaster recovery procedures
However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
6. Your Privacy Rights
Depending on your location, you may have the right to:
- Access the personal information we hold about you
- Correct inaccurate or incomplete information
- Request deletion of your personal information
- Object to or restrict processing of your information
- Data portability (receive your data in a structured format)
- Withdraw consent where processing is based on consent
- Opt out of marketing communications
To exercise these rights, please contact us at privacy@getproforge.com.
6.1 California Residents (CCPA/CPRA)
California residents have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know what personal information we collect, the right to delete, and the right to opt out of "sales" or "sharing" of personal information. We do not sell personal information.
6.2 European Economic Area (GDPR)
If you are in the EEA, our legal bases for processing include contract performance, legitimate interests, legal obligations, and consent. You have the right to lodge a complaint with your local data protection authority.
7. Children's Privacy
Our Services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn we have collected information from a child under 18, we will delete that information promptly.
8. International Data Transfers
Your information may be transferred to and processed in the United States and other countries where our service providers operate. We ensure appropriate safeguards are in place, including standard contractual clauses, to protect your information.
9. Third-Party Links
Our Site may contain links to third-party websites. We are not responsible for the privacy practices of these sites. We encourage you to read their privacy policies.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Services after changes constitutes acceptance of the updated policy.
11. Contact Us
If you have questions about this Privacy Policy or our privacy practices, please contact us at:
ProForge, Inc.
123 Construction Way
Phoenix, AZ 85001
Email: privacy@getproforge.com
Phone: (309) 240-9921