Privacy Policy
This Policy explains how Altovar S.r.l. ("we", the "Controller") processes personal data when you use the Forge service ("Service"). Compliant with EU Regulation 2016/679 (GDPR).
1. Data we collect
- Account data — email, password hash, name, locale preference, role assignments. Provided by you at sign-up.
- Workspace content — pages, documents, media you upload. We process this on your behalf as a Data Processor.
- Billing data — only what's needed for invoicing (company name, P.IVA, fiscal code, address, billing email). Card numbers are never stored on our servers; Stripe handles them.
- Usage telemetry — request logs (IP hashed to /24, user agent, route), audit log of state-changing actions. Retained 90 days on Free, configurable on paid plans.
2. Legal bases (Art. 6 GDPR)
- Contract (Art. 6(1)(b)) — operating the Service for you, processing payments, sending transactional emails.
- Legitimate interest (Art. 6(1)(f)) — security monitoring, abuse detection, audit logs.
- Consent (Art. 6(1)(a)) — analytics/marketing cookies on this site, which you control via the cookie banner.
- Legal obligation (Art. 6(1)(c)) — accounting and tax records, electronic invoicing under Italian SDI rules.
3. Where your data lives
All Service data is stored on servers physically located within the European Economic Area. We do not transfer personal data outside the EEA except to listed sub-processors with valid Standard Contractual Clauses.
4. Sub-processors
We use the following third parties to operate the Service:
| Service | Purpose | Location |
|---|---|---|
| Hetzner Online GmbH | Server hosting | Germany / Finland (EU) |
| Cloudflare, Inc. | CDN, DDoS protection, DNS | EU PoPs only (configurable) |
| Stripe Payments Europe | Payment processing | Ireland (EU) |
| OVHcloud SAS | Outbound transactional email | France (EU) |
We notify Pro+ customers at least 14 days in advance before adding a new sub-processor.
5. How long we keep data
- Account data — until you close your workspace.
- Workspace content — until you delete it; soft-deleted items stay in trash 30 days then are purged.
- Billing records — 10 years (Italian fiscal law).
- Audit log — 90 days on Free, up to 3 years on paid plans.
- Cookie consent log — 5 years (proof-of-consent retention recommended by Italian Garante).
6. Your rights (Art. 12-22 GDPR)
You have the right to:
- Access — see what we hold about you;
- Rectification — correct inaccurate data;
- Erasure — request deletion (a.k.a. "right to be forgotten");
- Portability — get your data in a machine-readable format;
- Restriction / Objection — limit how we use your data;
- Lodge a complaint with the Italian Garante per la Protezione dei Dati Personali.
Account admins can exercise most of these rights directly from Settings → "Tenant export" and "GDPR forget" inside the app. Otherwise email [email protected] — we respond within 30 days.
7. Cookies
See our Cookie Policy for details on which cookies the Forge marketing site and the editor use, and how to manage them.
8. Security
We use TLS for all traffic, encrypt backups at rest, hash passwords with bcrypt, scope every database query by tenant id, and audit every state change. We follow industry-standard practices but do not promise absolute security — no system is unbreakable.
9. Children
The Service is not directed to children under 16. We do not knowingly process data from minors without parental consent.
10. Contact
Data Controller: Altovar S.r.l., Italy.
Privacy contact: [email protected]
This Privacy Policy is a baseline that should be reviewed by a privacy-specialised lawyer before going live, especially the sub-processors list and retention schedules.