Privacy Policy

ForgeIMS ("we", "us", or "our") operates the ForgeIMS inventory management platform and website located at forgeims.com (the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have.

By using the Service, you agree to the practices described in this policy. If you do not agree, you should not use the Service.

1. Information We Collect

Information you provide

• Account information: Your name and email address when you create an account or accept an invitation.
• Business details: Your Shopify store domain, shop name, and preferred fulfillment location(s) when you connect your store.
• Vendor and supplier data: Contact names, email addresses, phone numbers, lead times, and notes you choose to enter for your suppliers.
• Purchase order data: PO numbers, line items, quantities, unit costs, expected dates, and internal notes.
• Correspondence: Any information you share when you email us or request support.

Data we collect through Shopify

When you connect your Shopify store, we access the following through the Shopify API, subject to the scopes you approve:

• Product and variant titles, SKUs, barcodes, and inventory levels.
• Product types, vendors, and collection information already stored in your Shopify catalog.
• Store location names and assigned inventory quantities per location.
• Inventory item adjustments so we can keep your local counts in sync.

Billing information

Payment processing is handled by Stripe. We do not store your full credit card number. We retain your billing email, Stripe customer ID, subscription ID, and subscription status so we can manage your account.

Usage and technical data

• Sync activity logs, including timestamps, success or failure status, and per-SKU error details.
• Upload logs for CSV imports, including filename, row counts, and processing status.
• Basic device and browser information collected automatically when you visit the site.

2. How We Use Your Information

• To provide, maintain, and improve the Service, including syncing your inventory between ForgeIMS and Shopify.
• To create, track, and fulfill purchase orders and receiving receipts.
• To generate low-stock alerts, reorder suggestions, and inventory reports.
• To process subscription payments and manage your billing relationship.
• To send you sync-failure and low-stock notifications by email when you have enabled them.
• To respond to your support requests and provide technical assistance.
• To monitor for abuse, fraud, and security issues.
• To comply with our legal and financial obligations.

3. How We Share Information

We do not sell your information. We share data only in the following circumstances:

• Shopify: Inventory updates you initiate are written back to your Shopify store via the Shopify API. Your connection to Shopify is governed by Shopify's own terms and privacy policy.
• Stripe: Billing-related data is shared with Stripe to process payments and manage subscriptions.
• Service providers: We use hosting and infrastructure providers that process data on our behalf under written agreements. These providers are prohibited from using your data for any other purpose.
• Legal compliance: We may disclose information if required by law, court order, or to protect the rights, property, or safety of ForgeIMS, our users, or others.
• Business transfer: In the event of a merger, acquisition, or asset sale, information may be transferred as part of that transaction, subject to the protections in this policy.

4. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Inventory snapshots, sync logs, and upload logs are retained to support reporting and audit trails. If you cancel your subscription, we will delete or de-identify your store data within 60 days, except where we are required to retain records for legal, accounting, or tax purposes.

You may request earlier deletion of your data by contacting us at the email below.

5. Data Security

We use industry-standard measures to protect your data, including encrypted transmission (TLS) and restricted internal access. Shopify access tokens are stored securely and used only to perform the sync and reporting actions you authorize. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Your Rights and Choices

• Access and update: You can view and update your account information and store settings within the Service at any time.
• Disconnect Shopify: You can revoke ForgeIMS's access to your Shopify store at any time from your Shopify admin under Apps.
• Manage notifications: You can enable or disable sync-failure and low-stock email alerts in your store configuration.
• Export: You can export inventory reports as CSV files from within the Service.
• Deletion: You may request deletion of your account and associated data by contacting us.
• Opt out of communications: You can unsubscribe from non-essential emails by following the link in the message or emailing us directly.

If you are located in the European Economic Area, United Kingdom, or California, you may have additional rights under the GDPR, UK GDPR, or CCPA respectively, including the right to access, correct, port, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at the email below.

7. Third-Party Links and Services

The Service integrates with Shopify and Stripe, each of which has its own privacy policy governing how they handle your data. We encourage you to review the Shopify Privacy Policy and the Stripe Privacy Policy. We are not responsible for the privacy practices of these third parties.

8. International Data Transfers

Your information may be processed in countries other than your own, including the United States, where our infrastructure providers operate. We take steps to ensure your data is protected in accordance with this policy and applicable law when transferred internationally.

9. Children's Privacy

The Service is intended for businesses and is not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe we have collected such information, please contact us and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Service and update the "Last updated" date above. Your continued use of the Service after a change takes effect constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or your personal data, please contact us: