Privacy Policy
Effective date: May 2026 · Last updated: May 2026
Forage ("we", "us", or "our") is committed to protecting your personal information. This policy explains what data we collect, why we collect it, and how we handle it.
1. Information We Collect
When you register with email and password, we store your name, email address, and a hashed (never plain-text) password. When you sign in with Google, GitHub, or Discord we receive your name, email address, and a provider user ID.
We store the search queries you run, the demands and posts Forage collects on your behalf, and any competitor research or synthesis reports you generate. This data is private to your account.
Payment processing is handled entirely by Lemon Squeezy. We never see or store your credit card number. We receive a subscription status and a customer ID from Lemon Squeezy to manage your plan.
We use a signed, server-side session cookie to keep you logged in. No tracking cookies or third-party analytics scripts are used.
2. How We Use Your Information
- To authenticate you and maintain your account
- To run AI analysis on posts you collect (post content is sent to OpenAI's API)
- To process subscription payments via Lemon Squeezy
- To send transactional emails (password reset, billing receipts) — we do not send marketing emails without your explicit consent
- To detect and prevent abuse
3. Data Sharing with Third Parties
We do not sell your data. We share data only with the following service providers as necessary to operate Forage:
| Provider | Purpose | Data shared |
|---|---|---|
| OpenAI | AI analysis of posts and synthesis reports | Post titles and body text |
| Lemon Squeezy | Payment processing and subscriptions | Email address, subscription status |
| Railway | Application hosting and database | All data stored in the database |
| Google / GitHub / Discord | Optional OAuth sign-in only | OAuth token (not stored after use) |
4. Data Retention
We retain your account and collected data for as long as your account is active. If you delete your account, we will delete your personal information and collected data within 30 days, except where we are required to retain it for legal or financial record-keeping purposes (e.g. billing records for up to 7 years).
5. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your account and associated data
- Export your demand data (use the CSV export feature)
- Object to certain processing
To exercise any of these rights, email us at privacy@forage.app. We will respond within 30 days.
6. Security
Passwords are hashed with bcrypt and never stored in plain text. Database connections use TLS. We use signed session cookies. No system is perfectly secure — if you discover a vulnerability, please report it to security@forage.app.
7. Children's Privacy
Forage is not directed at children under 13. We do not knowingly collect personal information from children. If you believe we have done so, contact us and we will delete it.
8. Changes to This Policy
We may update this policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the effective date. Continued use of Forage after changes constitutes acceptance.
9. Contact
Questions about this policy? Email us at privacy@forage.app.