Privacy Policy

Forged Hub ("we", "us") operates Forged Hub, a marketplace connecting event hosts and vendors. We are the data controller for personal information described in this policy.

Address: 3063 Whitland Crossing Drive, Nashville, TN 37214. Privacy contact: privacy@forgedhub.com.

• Account info you give us: name, email, phone number, and login credentials used to sign in via magic link or code.
• Business profile data you publish: business name, location, category, photos, descriptions, and event preferences.
• Payment information via processor: when you subscribe to a paid plan, our payment processor collects and stores billing details. We receive only transaction status and the last four digits of the card for receipts — we do not store full card numbers.
• Communications: messages you send through the platform and support correspondence.
• Usage & cookies: IP address, device/browser, pages viewed, and timestamps, collected via cookies and similar technologies (see Cookie Policy).

• Provide, secure, and improve the Forged Hub platform.
• Authenticate sign-ins and deliver login codes / magic links.
• Send event alerts you have opted into (vendor notification list).
• Process subscriptions and prevent fraud.
• Respond to support requests and enforce our Terms.

For visitors in the EU/UK we rely on: contract (to provide the service you signed up for), legitimate interests (platform security, product improvement), consent (marketing emails, non-essential cookies), and legal obligation (tax, compliance).

We do not sell personal information and we do not share it for cross-context behavioral advertising. We disclose information only to:

• Service providers / subprocessors who run the platform on our behalf under contractual confidentiality and data-protection terms — currently our hosting and backend platform (Lovable Cloud, which uses Supabase for database, authentication, and storage), our email delivery provider, and our payment processor.
• Other users, only to the extent you publish information (e.g. your public vendor or host profile, applications you submit).
• Legal requests when required by law or to protect rights, safety, and the integrity of the service.
• Business transfers in the event of a merger, acquisition, or asset sale, with notice to affected users.

We retain account and profile data while your account is active and for a reasonable period afterward to meet legal, accounting, and dispute-resolution obligations. You can request deletion at any time (see Section 8). Anonymous, aggregated usage data may be retained indefinitely.

If you are a California resident you have the right to:

• Know what personal information we collect, use, and disclose.
• Request a copy of your personal information (right to access / portability).
• Request deletion of your personal information.
• Correct inaccurate personal information.
• Limit use of sensitive personal information.
• Opt out of "sale" or "sharing" — we do not sell or share your personal information, so there is nothing to opt out of, but you may still submit a request to confirm.
• Be free from retaliation for exercising these rights.

To exercise these rights, email privacy@forgedhub.com with the subject line "California Privacy Request" or use the Account Settings page. We will verify your identity through your account email before responding, typically within 45 days. You may use an authorized agent; we will require written proof.

Shine the Light: California Civil Code §1798.83 lets California residents request a notice of personal information we disclose to third parties for their direct marketing purposes. We do not disclose personal information for third-party direct marketing.

If you are in the EU, UK, or EEA you have the right to: access, rectify, erase, restrict, port, and object to processing of your personal information, and to withdraw consent at any time. You may also lodge a complaint with your local supervisory authority.

To exercise any of these rights, email privacy@forgedhub.com.

Some browsers send a "Do Not Track" (DNT) or Global Privacy Control (GPC) signal. Because there is no industry-wide DNT standard, we treat GPC signals as a valid opt-out request for sale/sharing under the CCPA. We do not change other site behavior based on DNT.

In accordance with CalOPPA we: identify the categories of personal information we collect (Section 2), the third parties with whom we share it (Section 5), the process for users to review and request changes to their information (Section 7), how we notify users of changes (Section 13), and the effective date above.

We use industry-standard safeguards — encryption in transit (HTTPS/TLS), encrypted database storage through our hosting provider, role-based access controls, and row-level authorization rules — to protect your information. No system is perfectly secure; if you believe your account has been compromised, contact privacy@forgedhub.com.

Our service is operated from the United States and primarily serves US users. If you access Forged Hub from outside the US, your information will be transferred to and processed in the US. Where required, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.

Forged Hub is not intended for children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

We may update this policy from time to time. Material changes will be announced in-app and/or by email to your account address. Continued use of Forged Hub after the effective date constitutes acceptance.

Forged Hub
3063 Whitland Crossing Drive, Nashville, TN 37214
privacy@forgedhub.com