← Back to Home

Privacy Policy

Last updated: December 20, 2025

ThalosForge Inc. ("ThalosForge," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our services.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Email address
• Name (optional)
• Company name (optional)
• Password (stored securely hashed)

1.2 Usage Data

When you use our API, we collect:

• API request metadata (timestamp, endpoint, response time)
• Decision inputs and outputs (for audit trail)
• IP addresses
• Error logs

1.3 Payment Information

Payment processing is handled by Stripe. We do not store credit card numbers. We receive only transaction confirmations and billing addresses.

2. How We Use Your Information

We use your information to:

• Provide and maintain our services
• Process your transactions
• Send service-related communications
• Provide customer support
• Monitor and improve our services
• Detect and prevent fraud or abuse
• Comply with legal obligations

3. Data Retention

We retain your data as follows:

• Account data: Until you delete your account
• Decision audit logs: 90 days (configurable for enterprise)
• Access logs: 30 days
• Billing records: 7 years (legal requirement)

4. Data Security

We protect your data through:

• Encryption in transit (TLS 1.2+) and at rest (AES-256)
• Secure password hashing (bcrypt)
• Regular security audits
• Access controls and authentication
• Monitoring and alerting

5. Data Sharing

We do not sell your personal data. We may share data with:

• Service providers: AWS (hosting), Stripe (payments)
• Legal authorities: When required by law
• Business transfers: In case of merger or acquisition

6. Your Rights

You have the right to:

• Access: Request a copy of your data
• Correction: Update inaccurate data
• Deletion: Request deletion of your data
• Portability: Export your data in standard format
• Objection: Object to certain processing

To exercise these rights, contact us at privacy@thalosforge.com.

7. Cookies

We use essential cookies for:

• Authentication and session management
• Security (CSRF protection)

We do not use tracking or advertising cookies.

8. International Transfers

Your data may be processed in the United States. We ensure appropriate safeguards are in place for international transfers.

9. Children's Privacy

Our services are not intended for children under 18. We do not knowingly collect data from children.

10. Changes to This Policy

We may update this policy periodically. We will notify you of significant changes via email or through our services.

11. Contact Us

For privacy-related inquiries:

ThalosForge Inc.
Rose Glen, Virginia, USA
Email: privacy@thalosforge.com