ForgeBill Privacy Policy

Last updated: July 15, 2026

This Privacy Policy explains how CMC FACTORY LLC, doing business as ForgeBill, collects, uses, discloses, retains, and protects personal information when you use ForgeBill's mobile app, web app, websites, quote and approval pages, work-order and completion pages, invoice and payment pages, subscriptions, reminders, reports, exports, archives, and related services.

1. Personal Information We Collect

We collect account and business profile information; quote, work-order, invoice, report, and client records; job photos, signatures, notes, and templates; payment and subscription information; invoice email metadata and reminder attempts; support messages; and related information reasonably needed to provide, secure, support, and improve the Service.

Approval and signature evidence may include approval timestamps, signing timestamps, IP addresses, user-agent information, document hashes, and status history. Device, app, log, and security information may include app version, device model, operating system, locale, network diagnostics, and security events.

2. Sources

We collect information directly from you when you create an account, configure settings, create quotes, work orders, or invoices, add clients, upload files or job photos, request approvals or signatures, export data, enable reminders, contact support, or use the Service. We also receive information from clients or signers who use a public ForgeBill link and limited information from service providers such as Firebase, Google Cloud, SendGrid, Stripe, Apple, Google Play, and PostHog.

3. How We Use Information

We use personal information to create and secure accounts, store and sync records, generate document PDFs and public quote, work-order, invoice, and payment pages, preserve approval and signature evidence, send invoice emails, receipts, and reminders, process subscriptions and payments, create reports and exports, provide support, prevent abuse, comply with legal obligations, enforce our Terms, and maintain or improve the Service.

ForgeBill may use PostHog for first-party product events such as screen views, workflow milestones, and operational failures. These events are used for product analytics and service improvement, not advertising. ForgeBill does not intentionally send invoice text, client contact details, job-photo contents, signature images, or payment-card details in product-event properties.

4. Third-Party Services

We disclose personal information only as needed to provide, secure, maintain, and support the Service; comply with law; process payments; communicate with recipients; or protect rights and safety. Service providers may include Firebase and Google Cloud, SendGrid, Stripe, Apple, Google Play, PostHog, professional advisors, legal authorities, and business transaction parties. ForgeBill uses no third-party advertising or cross-app tracking.

5. Retention and Deletion

We retain personal information for as long as reasonably necessary to provide the Service, maintain your account, comply with legal obligations, resolve disputes, enforce agreements, prevent fraud or abuse, maintain security, process payments, support refunds and chargebacks, satisfy provider requirements, and maintain backups. Following subscription expiration, eligible cloud data may remain available in a 90-day read-only and export grace period before the applicable deletion process. Legal, security, payment, dispute, and backup obligations may require limited longer retention.

You can delete your ForgeBill account from Settings or request deletion by contacting support@forgebill.com. Account deletion covers active documents and associated photos, signatures, public-link records, generated artifacts, reports, and exports, subject to the limited retention reasons above and normal backup-deletion cycles.

6. Your Choices

You can export available data, update settings, request account deletion, disable push notifications in device settings where available, and contact the sending business about a quote, work order, invoice, approval, signature request, or reminder.

7. Cookies and Similar Technologies

ForgeBill uses minimal cookies and similar technologies only as needed to provide, secure, and remember settings for the Service. This includes essential account access and security storage from Firebase and Google Cloud, preference storage such as theme choice and cookie notice acknowledgement, and payment-related storage used when Stripe-hosted payment flows are opened.

We do not use advertising cookies, third-party ad tracking cookies, cross-app tracking, or cookies to sell cookie data.

8. Contact

Questions or requests about this Privacy Policy may be sent to support@forgebill.com.