The short version: Forge never sees or stores your source code or proprietary data. We collect only the workflow metadata needed to run the analytics dashboard — things like task types, cycle counts, and timing. You own your work. We help you measure it.
1. Who we are
ShipToday, Inc. ("ShipToday", "we", "us", or "our") operates the Forge product and the ShipToday website at shiptoday.ai. If you have questions about this policy, contact us at privacy@shiptoday.ai.
2. What information we collect
We collect information in two ways — information you give us directly, and information generated automatically when you use Forge.
Information you provide:
- Account information — name and work email address, collected when you sign up for Forge (free or paid).
- Payment information — billing details collected and processed by our payment provider. We do not store full card numbers.
- Communications — any messages you send us by email or through our contact form.
Information generated automatically:
- Workflow metadata — task types initiated, cycle counts, timing, and outcome signals (e.g., whether a PR was approved). This powers the analytics dashboard.
- Usage data — feature usage patterns, error logs, and performance data used to improve the product.
- Device and connection data — IP address, browser or client type, and operating system, collected for security and diagnostic purposes.
What we do not collect:
- Your source code, codebase contents, or any proprietary technical data.
- The content of your tickets, PRDs, documents, or internal communications.
- Any data from the tools Forge connects to (Jira, GitHub, etc.) beyond what is strictly required to execute a workflow step — and none of that is retained after the workflow completes.
3. How we use your information
- To provide, operate, and improve the Forge product.
- To generate and display the analytics dashboard available to your team.
- To process payments and manage your subscription.
- To send product updates, security notices, and support communications.
- To diagnose and fix technical issues.
- To comply with legal obligations.
We do not sell your personal information. We do not use your data to train AI models.
4. How we share your information
We share information only as follows:
- Service providers — third parties who help us deliver the product (cloud hosting, payment processing, error monitoring). These providers are contractually bound to use your data only for the services they provide to us.
- Your organization — on paid team add-ons (when available), workspace administrators can see aggregated analytics for their team.
- Legal requirements — if required by law, court order, or to protect the rights and safety of ShipToday or others.
- Business transfers — if ShipToday is acquired or merges with another entity, your information may be transferred as part of that transaction. We will notify you before this happens.
5. Data retention
We retain account information for as long as your account is active, plus a reasonable period after closure to comply with legal obligations. Workflow metadata is retained for up to 24 months to support trend analysis on your dashboard. You can request deletion of your data at any time — see Section 7.
6. Security
We implement industry-standard security controls to protect your information, including encryption in transit (TLS) and at rest, access controls, and regular security reviews. However, no system is completely secure, and we cannot guarantee the absolute security of your information.
7. Your rights
Depending on your location, you may have rights under applicable privacy law including:
- The right to access the personal data we hold about you.
- The right to correct inaccurate data.
- The right to request deletion of your data.
- The right to object to or restrict certain processing.
- The right to data portability.
- The right to withdraw consent where processing is based on consent.
To exercise any of these rights, email privacy@shiptoday.ai. We will respond within 30 days.
8. Cookies
We use essential cookies required for the product to function, and analytics cookies to understand how the site and product are used. You can control non-essential cookies through your browser settings. We do not use advertising cookies or share cookie data with ad networks.
9. Children
Forge is a professional tool intended for use by individuals 18 years of age or older. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
10. International transfers
ShipToday operates globally. Your information may be processed in countries outside your own. Where we transfer data internationally, we use appropriate safeguards such as Standard Contractual Clauses to ensure your data is protected to the same standard as in your home jurisdiction.
11. Changes to this policy
We may update this policy from time to time. We will notify you of material changes by email (if you have an account) or by posting a prominent notice on our website at least 14 days before the change takes effect. Your continued use of Forge after that date constitutes acceptance of the updated policy.
12. Contact us
For any privacy-related questions or requests, contact us at privacy@shiptoday.ai or write to:
ShipToday, Inc.
Privacy Team
privacy@shiptoday.ai