Privacy Notice

Summit Commerce Group, LLC, operating Profit Forge at profitforgehq.com, is the data controller for the personal data described here. This notice explains what we collect, why, who we share it with and what rights you have. Contact us at support@profitforgehq.com.

1. Data we collect and why

• Account data — email address and login credentials. Used to create and secure your account and to contact you about the Service. Legal basis: performance of our contract with you.
• Content and project data — the domains, notes, ideas, blueprints, reviews, marketing and validation records you create, including prompts you submit to AI features. Used to provide the Service. Legal basis: performance of our contract.
• Usage and technical data — actions taken in the app, AI usage records, IP address, device and browser information, and error logs. Used for security, fraud and abuse prevention, billing accuracy, support and improving the product. Legal basis: legitimate interests in running a secure, reliable service.
• Support messages — what you send us when you ask for help. Used to answer you. Legal basis: legitimate interests and contract performance.
• Billing records — subscription status, plan and payment outcome received from our payment provider. We do not receive or store your full card details. Legal basis: contract performance and legal obligation.

If we ever send marketing email, we do so only with your consent and you can withdraw it at any time.

2. Who we share data with

• Merchant of Record — Paddle.com, which sells the subscription, manages payments, invoicing, tax compliance and billing support on our behalf.
• Service providers and subprocessors — hosting, database, authentication, email and AI model providers who process data strictly to deliver the Service under contract.
• Professional advisers — legal and accounting advisers where necessary.
• Authorities — where required by law, or to establish, exercise or defend legal claims.

We do not sell your personal data or your project content.

3. AI processing

When you use an AI feature, the relevant prompt and project context are sent to our AI model providers to generate the result. We do not use your content to train our own models.

4. International transfers

We are based in the United States and our providers may process data in the US and elsewhere. Where data is transferred from the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

5. Retention

We keep account and project data for as long as your account is active. After cancellation we keep it for up to 30 days so you can export or reactivate, then delete or anonymise it, except where we must retain records longer for tax, accounting or legal reasons.

6. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to processing of your personal data, to data portability, and to withdraw consent. UK and EEA residents may also complain to their supervisory authority. Email support@profitforgehq.com and we will respond within one month.

7. Security

We use appropriate technical and organisational measures, including encryption in transit, access controls, per-account data isolation enforced at the database level, and least-privilege credentials. No system is completely secure, but we work to protect your data and will notify you of a breach where required by law.

8. Cookies

We use strictly necessary cookies and similar local storage to keep you signed in and to secure the Service. Our payment provider may set cookies needed to complete checkout. We do not use advertising cookies. You can clear or block cookies in your browser, but the app will not work properly without the essential ones.

9. Changes

We may update this notice. Material changes will be notified by email or in the app before they take effect.