1Forgebot Privacy Policy

Effective date: October 31, 2026

This policy explains how ForgedAgent ("ForgedAgent", "we", "us") collects, uses, and protects information when you use 1Forgebot at fg1.ca, the 1Forgebot web, phone, and desktop apps, and related services (the "Service").

Contact: info@forge1.ca

1. Who this applies to

• Customers: organizations that subscribe to 1Forgebot, and the people they invite into their workspaces ("Users").
• Visitors: people who browse fg1.ca or contact us.
• People your bots interact with: for example, the recipients of emails or texts your bots send, or callers whose RealVoice calls your bots follow up on. Your organization decides what your bots do with their information, and you are responsible for having the right to share it with the Service.

2. Information we collect

Account information. Name, email address, password (stored as a one-way hash by our authentication provider), organization name, and roles.

Workspace content. Everything you and your bots create or receive in your workspaces: messages, tasks, files and documents you upload, bot instructions, rules, skills, routines, approvals, and the run history and evidence (such as screenshots) that show what a bot did.

Bot memory. Facts, preferences, corrections, and decisions your bots remember so they can work the way you do. You can view, edit, and delete individual memories on each bot's "What this bot knows" page.

Stored sign-ins. Usernames and passwords you save so a bot can sign in to a website for you. Passwords are encrypted in a secret vault. They are filled into the bot's browser by our system and are never shown to AI models, written to logs, or displayed back to you. Password fields are masked in screenshots.

Connected apps. When you connect an app (for example an email account, a CRM, a calendar, or RealVoice), we store the connection details and access credentials in the same encrypted vault, and the data your bots read from or write to that app as part of their work.

Billing information. Your plan, add-ons, invoices, and payment status. Card details are collected and stored by Stripe; we never receive or store full card numbers.

Usage and device information. Which features you use, model usage and cost, bot browser time, SMS and email counts, IP address, browser and device type, and push notification subscriptions on devices where you turn notifications on.

Website enquiries. Information you send through the contact form on fg1.ca.

3. How we use information

• To provide the Service: run your bots, keep their memory, store your files, deliver notifications, and show you what your bots did.
• To enforce the rules and approvals you set, including asking you before a bot sends, posts, changes, deletes, or pays for something.
• To bill you, including usage beyond your plan's included amounts.
• To secure the Service: detect abuse, investigate incidents, and keep audit records.
• To support you and to tell you about changes to the Service.
• To improve the Service using aggregated usage information.

We do not sell personal information. We do not use your workspace content or bot memory to train AI models, and we choose AI providers whose terms do not permit them to train on data sent through their APIs.

4. Who processes information for us

We use these service providers to run the Service. Each receives only what it needs for its function.

Some providers process data outside Canada. When that happens, the information is subject to the laws of that country.

5. Isolation between customers

Each organization's workspaces are isolated from every other organization's. Database access rules, file storage paths, encrypted secrets, bot browsers, and notifications are separated per workspace. ForgedAgent staff do not access your workspace content by default. If we need to for support, access is time-limited, requires a recorded reason, is logged, and is visible to your organization's administrators.

6. Retention and deletion

• Workspace content and bot memory are kept while your subscription is active.
• You can delete individual memories, files, and connections at any time. Deleting a memory removes it and its search index entry; the bot keeps working.
• Disconnecting an app stops new access immediately. Memories already learned from it remain until you delete them; you can delete them by source.
• When an organization closes its account, we delete its workspaces, files, stored sign-ins, connections, and bot browsers within 30 days, except records we must keep for billing, tax, or legal reasons.
• Backups are overwritten on a rolling schedule.

7. Your choices and rights

You can access, correct, export, and delete your information from within the Service, or by emailing info@forge1.ca. You can turn off push and email notifications in Settings. You can ask us what personal information we hold about you and how it is used.

8. Security

We use encryption in transit, encrypted storage for secrets, per-workspace access rules enforced in the database, human approval before consequential bot actions, and audit logs. No system is perfectly secure; we will notify affected customers of a breach as required by law.

9. Children

The Service is for businesses and is not directed at children under 16.

10. Changes

We will post changes to this policy at fg1.ca and, for material changes, notify account owners by email before they take effect.

11. Contact

ForgedAgent · info@forge1.ca