SaaForge Privacy Policy

SaaForge Privacy Policy

Version 2026.08.02 — effective 2 August 2026

This Privacy Policy explains how SaaForge Pvt Ltd ("SaaForge", "we", "us", or "our") handles personal data when people visit our websites, create accounts, make enquiries, use our products or portals, receive professional services, apply for work, or otherwise interact with us. It applies subject to the law applicable to the relevant person and processing activity.

1. Who this policy covers

Our services are primarily intended for organisations and business users aged 18 or older. They are not directed to children. If you believe a child has provided personal data, contact us so we can investigate and take appropriate action.

2. Data we collect

Depending on the interaction, we may collect:

• identity and contact data, such as name, business email, telephone number, role, organisation, and account identifiers;
• account and security data, such as authentication events, access roles, consent records, recovery activity, and security logs;
• business, project, and service data, such as requirements, enquiries, bookings, proposals, contracts, support requests, project files, uploads, and communications;
• transaction data, such as invoices, payment status, billing contacts, and payment-provider references. Payment-card details are generally handled by payment providers rather than stored by SaaForge unless expressly disclosed;
• usage and technical data, such as pages and features used, timestamps, approximate location derived from an IP address, browser, device type, referral information, diagnostic events, and cookie choices;
• marketing and communication preferences, responses, and engagement; and
• recruitment data, such as a CV, work history, qualifications, portfolio, availability, and application communications.

We receive data directly from you, from your organisation or authorised users, automatically from your device, from integrated providers you choose to connect, and from lawful public or commercial sources where appropriate.

3. How and why we use data

We use personal data to provide and administer accounts and services; authenticate users and enforce permissions; respond to enquiries and prepare proposals; deliver projects and support; process billing; communicate operational notices; maintain consent and audit records; prevent fraud and secure systems; diagnose and improve performance; understand aggregate product usage; manage recruitment; comply with legal obligations; establish or defend legal claims; and send marketing where permitted and consistent with your choices.

Our legal basis depends on the context and applicable law. It may include performing a contract or taking requested pre-contract steps, complying with legal obligations, consent, and legitimate interests such as providing secure business services, improving operations, and communicating with customers, balanced against individual rights.

4. Cookies, analytics, and lead scoring

We may use necessary cookies for security, sessions, preferences, and core functionality. Optional analytics or marketing technologies will be controlled according to applicable requirements and available choices. Our analytics architecture supports anonymous and authenticated measurement without fingerprinting. We do not create a persistent identity by combining device characteristics to bypass user choices.

We may use configurable rules to prioritise business enquiries based on information and interactions, with scores that can decay over time. Lead scoring assists staff workflow; it is not intended to make a solely automated decision producing legal or similarly significant effects. You may contact us for information or human review where applicable.

5. How we share data

We may share data with personnel and contractors who need it; cloud hosting, authentication, storage, analytics, communications, payment, and support providers acting under appropriate terms; professional advisers and auditors; your organisation and authorised account administrators; authorities or other parties where required to comply with law, protect rights or safety, or investigate abuse; and a buyer, investor, or successor in a proposed or completed corporate transaction subject to appropriate safeguards.

We do not sell personal data for money. We require service providers to use data only for agreed purposes and to protect it appropriately.

6. International data transfers

Our providers, customers, or personnel may process data in countries other than where it was collected. Where applicable law requires safeguards for an international transfer, we use appropriate contractual, organisational, or other lawful measures and assess providers proportionately.

7. Retention

We retain personal data only as long as reasonably necessary for the purposes described, including service delivery, account administration, security, auditability, dispute resolution, and legal, tax, or contractual obligations. Retention depends on the data type, sensitivity, relationship, risk, and applicable requirements. We then delete, anonymise, or securely isolate data, subject to backups and lawful holds. Important business records may use auditable soft deletion before final disposal.

8. Security

We use administrative, technical, and organisational safeguards appropriate to the data and risk, including access controls, server-side authorisation, row-level database security, logging, encryption capabilities, and provider controls. No system or transmission is completely secure. You should use strong credentials, protect devices, and promptly report suspected compromise.

9. Your rights and choices

Depending on applicable law, you may have rights to request access, correction, deletion, restriction, objection, portability, withdrawal of consent, or review of certain automated processing. These rights can be limited by law and legitimate retention needs. You may unsubscribe from marketing through the message or contact us. Withdrawal does not invalidate earlier lawful processing.

To make a request, email saaforge@gmail.com with enough information for us to understand and verify it. We may request proportionate proof of identity or authority. Authorised agents may be required to show authority. You may also have the right to complain to a competent regulator.

10. Push notifications and communications

Browser push notifications are opt-in. If enabled, we store the subscription endpoint and associated delivery keys needed to send them. You can disable notifications in the application or browser settings. Operational messages necessary for security, billing, or service administration may still be sent where permitted.

11. Customer-controlled data

When we process personal data in a product or project on behalf of a customer, that customer may determine the purposes and means of processing and SaaForge may act as its processor or service provider. Requests about such data should generally be directed to the customer; we will assist as required by our agreement and applicable law.

12. Third-party services and links

Integrations and external sites have their own privacy practices. Review their notices before providing data. This policy does not control independent third parties.

13. Policy versions and changes

We may update this policy for legal, security, operational, or service changes. Each published version records its effective date. Material changes may be highlighted or presented for renewed consent where appropriate. Prior consent evidence remains linked to the exact accepted version.

14. Contact

For privacy questions or requests, email saaforge@gmail.com.