Privacy Policy

1. Overview

FirmForge ("we", "us", "our") is committed to protecting the privacy of operators and their data. This Privacy Policy explains what information we collect, how we use it, and what rights you have regarding your data.

By using the FirmForge platform, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Operator Account Data

When you register as an operator, we collect:

• Name and email address
• Password (stored as a hashed value, never in plain text)
• IP address at registration and login
• Terms acceptance timestamp

2.2 Platform Configuration Data

When you create and configure a platform, we store:

• Platform name, slug, and type (brokerage or prop firm)
• Branding assets (logo URL, colours, favicon)
• Custom domain configuration
• SMTP and notification settings
• Plan subscription and billing history

2.3 End-Client Data (on your platforms)

Your clients' data (names, emails, trading accounts, transactions, KYC documents) is stored on FirmForge infrastructure on your behalf. You are the data controller for your clients' data. FirmForge acts as a data processor under your instructions.

We do not use your clients' data for any purpose other than providing the platform services you have configured.

2.4 Usage and Analytics Data

We use Microsoft Clarity on our marketing website (firmforge.cfd) and the operator dashboard to collect anonymous usage data including session recordings, heatmaps, and click patterns. This data is used solely to improve the platform experience. Microsoft Clarity's privacy policy is available at clarity.microsoft.com/terms.

3. How We Use Your Information

• To provision and operate your platform
• To send transactional emails (OTP codes, account notifications)
• To enforce plan limits and billing
• To investigate abuse reports or Terms of Service violations
• To improve the platform and fix issues
• To comply with legal obligations

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Data Storage and Security

All data is stored on encrypted servers. Passwords are hashed using bcrypt. API communications are encrypted in transit via TLS. We apply access controls so that only authorised personnel can access production data.

Backups are taken regularly. In the event of a data breach, we will notify affected operators within 72 hours where required by applicable law.

5. Third-Party Services

FirmForge integrates with the following third-party services to operate:

• Brevo (Sendinblue) -- transactional email delivery
• Vercel -- frontend hosting and custom domain routing
• Twelve Data / Oanda -- live price feed data
• Microsoft Clarity -- anonymised UX analytics (marketing pages + dashboard only)
• Cloudflare -- DNS and edge routing

Each of these providers has their own privacy policy and data handling obligations.

6. Data Retention

Operator account data is retained for the duration of your account plus 90 days after account termination. Platform data (clients, trades, transactions) is retained for 90 days after platform deletion, after which it is permanently removed.

You may request deletion of your data at any time by contacting us at hello@firmforge.cfd.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Data portability

To exercise any of these rights, contact us at hello@firmforge.cfd.

8. Cookies

Our marketing website uses minimal cookies for session management. Microsoft Clarity uses cookies for session recording on our dashboard and marketing pages. No advertising or tracking cookies are used on client-facing trading portals.

9. Children's Privacy

FirmForge services are intended for business operators and are not directed at anyone under 18 years of age. We do not knowingly collect data from minors.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify active operators via email when material changes are made. Continued use of the Service after changes constitutes acceptance.

11. Contact

For privacy-related questions or requests, contact us at hello@firmforge.cfd.