Legal and privacy

Every document below is readable without an account, and each carries its own date.

Nothing here is behind a sign-in or a sales conversation. If you are deciding whether to buy, the data processing agreement and the subprocessor list are the two you want, and both are on this page.

The agreement

Terms of service: What we sell and what we ask of you, including acceptable use, the money-back terms, and what happens to your data when a subscription ends.
Service levels: The availability we aim for, how it is measured, and how quickly we expect to recover from failures.

Data protection

Privacy policy: What we do with data about you: your account, your payments, your support emails.
Data processing agreement: What we do with data your forge holds, where you are the controller and we are the processor. Article 28 of the GDPR.
Subprocessors: Every company that touches your data on our behalf, what they do, and where.

Reporting something

Reporting illegal content: How to tell us about content on a customer's forge, and what we do about it.
Security and vulnerability reporting: How to report a hole in the platform, what we promise in return, and the machine-readable version at /.well-known/security.txt.

Who we are

Impressum: The provider's identity, and the single point of contact for authorities and customers.

Saving a copy

Each document is one page and prints cleanly, so your browser's print or "save as PDF" will give you a copy with the date on it. We would rather keep one readable, current version of each than circulate PDFs that go stale in somebody's procurement folder.