Privacy policy

This policy explains how Forge Labs handles personal data collected through this website. It covers the website only. The data inside the products we build for clients follows each client’s own policies and our security documentation.

Who is responsible

Forge Labs LTDA, CNPJ 66.978.221/0001-47, based in Gaspar, Santa Catarina, Brazil. For any question or request about your data, write to [email protected].

What we collect

When you send the contact form: your name, work email, the type of project, the budget range, the project description and how you heard about us.

When you browse the site: if you accept analytics cookies, Google Analytics records how the site is used, such as pages visited, time on page, approximate location, device and browser. We use this only in aggregate, to understand what is useful and what is not.

Technical data: like any website, the servers that deliver it process technical data such as IP address and browser type, to deliver pages and protect the site against abuse. The contact form also uses Cloudflare Turnstile to tell people from bots.

We do not ask for sensitive data, and we ask you not to include it in the form.

Why we use it

• To reply to your message and, if it makes sense, prepare a proposal. This is based on the steps you asked for before a possible contract.
• To understand how the site is used, only if you consent to analytics cookies. You can withdraw that consent at any time.
• To keep the site secure and working.

We do not sell your data, we do not add you to mailing lists and we do not make automated decisions about you.

Who processes it for us

• Amazon Web Services: hosts the site and runs the service that sends the form.
• Resend: delivers the form message to our inbox.
• Google: hosts our email (Google Workspace) and, with your consent, provides Google Tag Manager and Google Analytics.
• Cloudflare: verifies the form with Turnstile.

Some of these providers process data outside Brazil, mainly in the United States, under their own data protection commitments.

How long we keep it

• Contact form messages: stored in our email inbox for up to 5 years, then deleted. They are not copied to a CRM or any other system.
• Analytics data: kept for the retention period configured in Google Analytics, of up to 14 months.
• Technical data: kept only as long as needed for security.

Cookies

Analytics cookies are only set if you accept them in the cookie notice. If you decline, the site works the same way. We store your choice so we do not ask again on every visit, and you can change it at any time through the cookie settings link in the footer.

Your rights

You can ask us to confirm whether we hold your data, give you a copy, correct it, delete it, tell you who we share it with, or stop using it for analytics. Write to [email protected] and we will reply within 15 days. If you are not satisfied with our answer, you can contact your local data protection authority, which in Brazil is the ANPD.

Changes

If this policy changes, the new version will be published here with a new date.