Privacy Policy

Last updated: May 6, 2026

Information We Collect

When you sign up for SMB Forge, we collect:

• Your name, email address, and phone number
• Business name, address, and industry
• Payment information (processed by Stripe — we never store card numbers)
• Google Calendar and OAuth tokens (encrypted, used only to manage your appointments)

When your customers interact with your SMB Forge assistant (SMS, phone call, or web chat), we temporarily process:

• Customer name, phone number, and email
• Conversation messages (to provide the service)
• Appointment and order details

How We Use Information

We use collected information solely to:

• Provide and improve the SMB Forge service
• Process payments and manage your account
• Send appointment reminders and invoices to your customers on your behalf
• Send you notifications about bookings, orders, and account activity via Telegram

Data Sharing

We do not sell your data or your customers' data. We share information only with:

• Stripe (payment processing)
• Google (calendar integration, per your authorization)
• Telnyx (SMS and phone call delivery)
• LLM providers (to generate AI responses — conversations are processed but not stored by the provider)

Data Retention

We retain your account data while your subscription is active. After cancellation, we retain data for 30 days, then delete it unless you request earlier deletion. Conversation logs are retained for 90 days for quality improvement, then purged.

Your Rights

You may request access to, correction of, or deletion of your personal data by emailing hello@smbforge.com. We will respond within 30 days.

Cookies

We use Google Analytics (gtag.js) to understand site usage. You may opt out via browser settings or the Google Analytics opt-out browser add-on.

SMS Consent

By providing a phone number to an SMB Forge client business, customers consent to receive appointment reminders, booking confirmations, and invoices via SMS. Customers may opt out by replying STOP at any time.

Security

We use HTTPS for all connections, encrypt sensitive data at rest in Cloudflare KV and D1, and follow industry-standard security practices. No system is perfectly secure, and we encourage you to contact us if you discover a vulnerability.

California Residents

Under the CCPA, California residents may request: (1) the categories of personal information collected, (2) the business purpose for collection, (3) the categories of third parties with which we share information, and (4) deletion of personal information. Submit requests to hello@smbforge.com.

Changes

We may update this policy periodically. The "Last updated" date reflects the most recent revision. Continued use of SMB Forge after changes constitutes acceptance.

Contact

Questions about this policy? Email hello@smbforge.com.