Privacy Policy

1. Information We Collect

1.1 Information You Provide Directly

• Account Information: When you register, we collect your name, email address, company name, job title, and payment information.
• Profile Information: You may provide additional information such as profile photos, preferences, and notification settings.
• Customer Data: You may upload business data, forecasts, reports, and other content to the Service ("Customer Data"). While we process this data to provide the Service, it remains your property.
• Communications: We collect information when you contact us, including support requests, feedback, and survey responses.

1.2 Information Collected Automatically

• Usage Data: We collect information about how you interact with the Service, including features used, pages visited, time spent, clicks, and navigation patterns.
• Device and Log Information: We collect IP addresses, browser type, operating system, device identifiers, referring URLs, and system activity logs.
• Cookies and Similar Technologies: We use cookies, web beacons, and local storage to enhance functionality, remember preferences, analyze usage, and secure the Service. See our Cookie Policy for details.

1.3 Information from Third Parties

We may receive information from business partners, integration providers, and public sources to supplement our records, verify identity, or enhance our services.

2. How We Use Your Information

We use the information we collect to:

• Provide and Maintain the Service: Operate, maintain, and improve our forecasting platform and features
• Process Transactions: Handle billing, payments, and account management
• Communicate: Send service notifications, updates, security alerts, and support messages
• Personalize Experience: Customize content, recommendations, and user interface
• Analyze and Improve: Conduct analytics, research, and product development
• Ensure Security: Detect and prevent fraud, abuse, and security threats
• Comply with Law: Meet legal obligations and enforce our agreements
• Marketing: Send promotional communications (with your consent where required)

3. Legal Basis for Processing

We process personal information based on the following legal grounds:

• Contract Performance: Processing necessary to fulfill our contract with you
• Legitimate Interests: Processing for our legitimate business interests, provided your rights do not override these interests
• Legal Compliance: Processing required to comply with applicable laws
• Consent: Processing based on your specific consent (e.g., for marketing communications)

4. How We Share Information

4.1 Service Providers

We share information with trusted third-party vendors who perform services on our behalf, including:

• Cloud hosting and infrastructure providers (AWS, Google Cloud)
• Payment processors (Stripe)
• Analytics providers
• Customer support platforms
• Email and communication services

All service providers are contractually obligated to protect your information and use it only for specified purposes.

4.2 Business Partners

With your consent, we may share information with integration partners to enable connectivity between Forecasterly and other business tools you use.

4.3 Legal Requirements

We may disclose information if required by law, court order, or government request, or when necessary to:

• Protect our rights, property, or safety
• Prevent fraud or illegal activity
• Respond to emergencies
• Enforce our agreements

4.4 Business Transfers

If we are involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your personal information.

4.5 Aggregated and Anonymized Data

We may share aggregated, anonymized data that does not identify individuals for industry analysis, benchmarking, and marketing purposes.

5. Data Security

We implement comprehensive security measures to protect your information:

• Encryption: Data in transit uses TLS 1.3 encryption; data at rest uses AES-256 encryption
• Access Controls: Role-based access controls, multi-factor authentication, and least-privilege principles
• Monitoring: 24/7 security monitoring, intrusion detection, and automated threat response
• SOC 2 Type II: We maintain SOC 2 Type II certification, demonstrating our commitment to security, availability, processing integrity, confidentiality, and privacy
• Regular Audits: Annual third-party security assessments and penetration testing
• Employee Training: Regular security awareness training for all personnel

Despite these measures, no internet transmission is completely secure. We encourage you to protect your account credentials and report suspicious activity immediately.

6. Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law:

• Account Information: Retained while your account is active and for 7 years thereafter for legal and financial record-keeping
• Customer Data: Retained per your subscription terms; deleted within 30 days of account termination (unless export requested)
• Usage Data: Retained for 12-24 months for analytics and service improvement
• Communications: Retained for 7 years for customer service and legal compliance

You may request deletion of your data at any time by contacting privacy@forecasterly.co, subject to legal retention requirements.

7. Your Privacy Rights

Depending on your location, you may have the following rights:

7.1 General Rights

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Request transfer of your data to another service
• Restriction: Request limitation of processing in certain circumstances
• Objection: Object to processing based on legitimate interests or direct marketing

7.2 California Privacy Rights (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act:

• Know what personal information is collected, used, shared, or sold
• Delete personal information held by businesses
• Opt-out of the sale of personal information (we do not sell personal information)
• Non-discrimination for exercising privacy rights

7.3 European Privacy Rights (GDPR)

If you are in the European Economic Area, you have rights under the General Data Protection Regulation, including:

• Right to lodge a complaint with a supervisory authority
• Right to withdraw consent at any time
• Right to object to automated decision-making (we do not engage in automated decision-making with legal effects)

7.4 Exercising Your Rights

To exercise your rights, contact us at privacy@forecasterly.co or through your account settings. We will respond within 30 days (or as required by applicable law). We may need to verify your identity before processing your request.

8. International Data Transfers

We are based in the United States. If you access the Service from outside the US, your information will be transferred to, stored, and processed in the US and other countries where our service providers operate.

We ensure appropriate safeguards for international transfers:

• Standard Contractual Clauses: We use EU Commission-approved Standard Contractual Clauses for transfers from the EEA, UK, and Switzerland
• Adequacy Decisions: We rely on adequacy decisions where applicable
• Data Processing Agreements: All service providers sign data processing agreements with appropriate transfer safeguards

9. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, contact us immediately at privacy@forecasterly.co, and we will delete such information.

10. Third-Party Links and Services

The Service may contain links to third-party websites or services. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party sites you visit.

11. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Authenticate users and prevent fraud
• Remember preferences and settings
• Analyze Service usage and performance
• Deliver relevant content and advertisements

You can manage cookie preferences through your browser settings. Disabling cookies may affect Service functionality.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of material changes by:

• Posting the updated policy with a revised "Effective Date"
• Sending email notification to registered users
• Displaying a prominent notice in the Service

Your continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.

13. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or our privacy practices:

Privacy Officer

PostGraph, Inc. d/b/a Forecasterly

Email: legal@forecasterly.co

Mailing Address: Dallas, Texas, United States

We will respond to all inquiries within 30 days.