Privacy Policy

Welcome to ForgeWeb ("we," "our," or "us"). ForgeWeb is operated from India. We are a software development and digital solutions production company specializing in custom websites, web applications, business automation systems, SaaS platforms, restaurant and business management systems, and enterprise digital solutions.

For privacy-related inquiries, you can contact our Data Controller at forgeweb224@gmail.com.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at forgeweb.in, use our services, or engage with us in any capacity. By accessing or using our website and services, you agree to the terms outlined in this Privacy Policy.

We are committed to protecting your privacy and ensuring the security of your personal data in compliance with applicable Indian data protection laws and global best practices.

Important Notice: Please do not submit highly sensitive personal information (such as passwords, financial account details, government IDs, or sensitive personal data) through our website forms unless specifically requested.

Personal Information

We may collect personally identifiable information that you voluntarily provide when you contact us, submit a project inquiry, subscribe to updates, or engage with our services. This may include:

• Full name and business or organization name
• Email address and phone number
• Company website URL and social media handles
• Project requirements, briefs, and related documentation
• Billing information and payment details (processed securely through third-party gateways)
• Any other information you choose to share with us during consultations

Technical Information

When you visit our website, we may automatically collect certain technical data to improve your experience and analyze site performance:

• IP address, browser type, and operating system
• Device type, screen resolution, and viewport dimensions
• Pages visited, time spent on pages, and navigation patterns
• Referring website URL and search terms used to find us
• Cookies, session identifiers, and local storage data

We use the information we collect for the following purposes:

• To respond to your inquiries, provide project estimates, and deliver our services
• To communicate with you about project status, updates, and deliverables
• To process transactions and send invoices through secure payment channels
• To improve, personalize, and optimize our website performance and user experience
• To analyze usage trends and monitor the effectiveness of our marketing efforts
• To detect, prevent, and address technical issues and security vulnerabilities
• To comply with legal obligations and enforce our terms of service
• To send periodic updates about our services (only with your consent, and you may unsubscribe at any time)

Legal Basis for Processing

We process your personal data based on the following legal bases:

• User Consent: When you voluntarily provide details and consent to our processing (e.g., newsletter subscriptions or inquiry forms).
• Contractual Necessity: To fulfill our agreements, provide custom project services, and perform deliverables.
• Legitimate Business Interests: To maintain and optimize our website, secure our platform, and analyze visitor traffic.
• Legal Obligations: To comply with tax, corporate, or other regulatory requirements in India.

No Sale of Personal Data

ForgeWeb does not sell, rent, or trade your personal information to third parties. We strictly use your data to communicate with you and deliver the requested software services.

We take client confidentiality extremely seriously. All project-related data, including source code, design assets, business logic, proprietary algorithms, databases, and intellectual property shared with us during the course of a project, is treated as strictly confidential.

• Client project data is never shared with third parties without explicit written consent
• Access to project data is restricted to authorized team members directly involved in the project
• Upon project completion, all client data is either transferred to the client or securely deleted as per mutual agreement
• We are open to signing Non-Disclosure Agreements (NDAs) before commencing any engagement
• Upon full payment, the client receives ownership of the final deliverables specifically created for their project. ForgeWeb retains ownership of its pre-existing tools, frameworks, libraries, templates, and proprietary development assets used in creating the deliverables.

Our website uses cookies and similar tracking technologies to enhance your browsing experience and gather analytical data. Cookies are small text files stored on your device that help us understand how visitors interact with our site.

• Essential Cookies: Required for the basic functionality of our website, such as session management and form submissions. These cannot be disabled.
• Analytics Cookies: Help us understand visitor behavior, popular pages, and traffic sources. We may use Google Analytics or similar platforms for this purpose.
• Functional Cookies: Remember your preferences (theme, language, region) to provide a more personalized experience on return visits.

You can control cookie settings through your browser preferences. Disabling certain cookies may affect website functionality.

Cookie Consent: By continuing to use our website, you consent to the use of cookies as described in this policy. You can adjust your consent settings via the cookie notice displayed on our website.

We may use third-party services that collect, monitor, and analyze data to improve our service offerings. These third-party providers have their own privacy policies governing the use of your information:

• Google Analytics — for website traffic analysis and user behavior insights
• Payment Gateways — for secure transaction processing (e.g., Razorpay, Stripe)
• Email Service Providers — for transactional and marketing communications
• Cloud Hosting Providers — for secure data storage and application hosting (e.g., Vercel, AWS)
• WhatsApp and related communication platforms — for customer communication and support

We encourage you to review the privacy policies of these third-party services. ForgeWeb is not responsible for the privacy practices of external platforms.

Links to Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices, content, or security of those external websites. We encourage you to read the privacy statements of any website you visit.

We implement industry-standard security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. Our security practices include:

• SSL/TLS encryption for all data transmitted between your browser and our servers
• Encrypted storage for sensitive information including credentials and payment data
• Regular security audits, vulnerability assessments, and dependency updates
• Role-based access controls limiting data access to authorized personnel only
• Secure development practices following OWASP guidelines

While we strive to use commercially acceptable means to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to continuously improving our practices.

Data Breach Notification

In the event of a data breach affecting personal information under our control, we will take reasonable, prompt steps to investigate, mitigate the issue, and notify affected parties and regulatory authorities where required by applicable law.

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Specifically:

• Contact form submissions and inquiry data are retained for up to 24 months
• Project data may be retained for operational, backup, support, and legal purposes unless otherwise agreed.
• Financial and billing records are retained as required by Indian taxation and accounting laws
• Analytics data is retained in anonymized form for trend analysis and does not identify individual users

You may request early deletion of your data at any time by contacting us. We will process your request within 30 business days, subject to any legal retention obligations.

Depending on your jurisdiction, you may have certain rights regarding your personal data. We respect and facilitate the following rights:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Correction: Request correction of any inaccurate or incomplete personal data
• Right to Deletion: Request deletion of your personal data, subject to legal requirements
• Right to Restrict Processing: Request that we limit how we use your data in certain circumstances
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Withdraw Consent: Withdraw your consent for data processing at any time without affecting prior lawful processing

To exercise any of these rights, please contact us at forgeweb224@gmail.com. We will respond to your request within a reasonable timeframe, typically within 30 days.

International Users & Transfers

If you access our services from outside India, you understand and agree that your information may be processed and stored in India, which may have data protection laws that differ from those in your jurisdiction.

Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal data from a minor, we will take immediate steps to delete such information from our systems.

If you are a parent or guardian and believe your child has provided personal information to us, please contact us immediately so we can take appropriate action.

ForgeWeb reserves the right to update or modify this Privacy Policy at any time. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you via email or a prominent notice on our website.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Continued use of our website and services after any changes constitutes your acceptance of the revised policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to reach out to us. We aim to respond to all privacy-related requests within 30 business days.