1. Introduction

Welcome to ParamForge ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our campaign parameter management platform.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide when using ParamForge:

• Account Information: Email address, name, password, company name, and profile picture
• Campaign Data: Campaign parameters, templates, base URLs, and related metadata
• Team Information: Team names, member roles, and collaboration settings
• Communication Data: Support requests, feedback, and correspondence

2.2 Automatically Collected Information

We automatically collect certain information when you use our service:

• Usage Data: Features used, pages viewed, time spent, and interaction patterns
• Device Information: Browser type, operating system, IP address, and device identifiers
• Log Data: Access times, error logs, and performance metrics
• Cookies: Authentication tokens, preferences, and session information

3. How We Use Your Information

We use your information for the following purposes:

• Service Delivery: Provide, maintain, and improve ParamForge features
• Account Management: Create and manage your account, authenticate users
• Communication: Send service updates, security alerts, and support responses
• Team Collaboration: Enable sharing and collaboration features
• Analytics: Understand usage patterns and improve user experience
• Security: Detect, prevent, and address security issues and fraud
• Legal Compliance: Comply with legal obligations and enforce our terms

4. Data Sharing and Disclosure

4.1 We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

4.2 When We Share Information

We may share your information in the following circumstances:

• Team Members: Campaign and template data shared within your teams
• Service Providers: Third-party services that help us operate ParamForge (hosting, analytics, email delivery, error tracking)
• Legal Requirements: When required by law, court order, or governmental authority
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorize sharing

4.3 Third-Party Services

We use the following third-party services:

Application Services

• Supabase: Database and authentication (Privacy Policy: https://supabase.com/privacy)
• Vercel: Application hosting (Privacy Policy: https://vercel.com/legal/privacy-policy)
• Sentry: Error tracking and monitoring (Privacy Policy: https://sentry.io/privacy/)
• Resend: Email delivery (Privacy Policy: https://resend.com/legal/privacy-policy)

Analytics and Advertising Services

• Google Analytics: Website analytics and user behavior tracking (Privacy Policy: https://policies.google.com/privacy)
• Google Ads: Advertising and conversion tracking (Privacy Policy: https://policies.google.com/privacy)
• Meta Ads (Facebook): Advertising and audience targeting (Privacy Policy: https://www.facebook.com/privacy/policy/)

5. Analytics and Advertising

5.1 Google Analytics

We use Google Analytics to understand how visitors interact with our website and landing pages. Google Analytics collects information such as:

• Pages visited and time spent on each page
• Browser type, device type, and screen resolution
• Geographic location (country, city)
• Referring website or source of traffic
• User interactions and navigation patterns

Google Analytics uses cookies and similar technologies. You can opt-out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

5.2 Google Ads

We use Google Ads for advertising campaigns and conversion tracking. This service may:

• Track ad clicks and conversions (signups, purchases)
• Use cookies to show you relevant ads across Google's network
• Enable remarketing to show ads to previous visitors
• Collect demographic and interest information

You can control ad personalization and opt-out of interest-based advertising through Google Ads Settings.

5.3 Meta Ads (Facebook)

We use Meta's advertising platform (Facebook Ads) for marketing campaigns. The Meta Pixel installed on our website and landing pages may:

• Track website visits and user actions (page views, signups)
• Enable conversion tracking for ad campaigns
• Create custom audiences for targeted advertising
• Show you relevant ads on Facebook, Instagram, and partner networks
• Measure ad performance and effectiveness

You can control how Facebook uses your data for advertising through your Facebook Ad Preferences.

5.4 Opt-Out Options

You can opt-out of personalized advertising through these resources:

• Network Advertising Initiative: https://optout.networkadvertising.org/
• Digital Advertising Alliance: https://optout.aboutads.info/
• Your Online Choices (EU): https://www.youronlinechoices.com/
• Browser settings: Configure your browser to block third-party cookies

Note: Opting out of personalized ads does not mean you will see fewer ads, but they will be less relevant to your interests.

6. Data Security

We implement industry-standard security measures to protect your data:

• Encryption: Data encrypted in transit (TLS/SSL) and at rest
• Authentication: Secure password hashing and OAuth 2.0 integration
• Access Control: Row-level security (RLS) and role-based permissions
• Monitoring: Automated security monitoring and error tracking
• Regular Updates: Security patches and dependency updates

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. When you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.

Specific retention periods:

• Account Data: Until account deletion + 30 days
• Campaign Data: Until deletion by user or account closure
• Log Data: 90 days for analytics, 1 year for security logs
• Backup Data: 30 days in backup systems

8. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Portability: Export your data in CSV or JSON format
• Objection: Object to certain data processing activities
• Withdrawal: Withdraw consent for data processing

To exercise these rights, please contact us at privacy@paramforge.com

9. Cookies and Tracking

We use cookies and similar technologies to provide and improve our service. Cookies are small text files stored on your device.

9.1 Types of Cookies We Use

• Essential Cookies: Required for authentication and core functionality
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Google Analytics cookies to understand usage patterns
• Advertising Cookies: Google Ads and Meta Pixel cookies for ad targeting and measurement

You can control cookies through your browser settings, but disabling essential cookies may affect functionality.

10. International Data Transfers

ParamForge is hosted on servers that may be located in different countries. By using our service, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection laws.

We ensure appropriate safeguards are in place for international transfers, including using services with EU-U.S. Data Privacy Framework certification where applicable.

11. Children's Privacy

ParamForge is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we discover that we have collected data from a child, we will delete it promptly.

12. Changes to This Privacy Policy

We may update this privacy policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we may also send you an email notification.

Your continued use of ParamForge after changes become effective constitutes acceptance of the updated policy.

13. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, and shared
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell data)
• Right to non-discrimination for exercising your privacy rights

14. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right of access and data portability
• Right to rectification and erasure
• Right to restriction of processing
• Right to object to processing
• Right to lodge a complaint with a supervisory authority

Our legal basis for processing: Contract performance, legitimate interests, and consent where required.

15. Contact Us

If you have questions about this privacy policy or our data practices, please contact us: