Legal

Privacy Policy

Last updated: October 28, 2026

This Privacy Policy applies to Forge Frameworks Inc. (“Forge Frameworks”, “we”, “us” or “our”) online services, including but not limited to the Forge Frameworks’ website available at forgeframeworks.ca including all subdomains (“Website”), the Forge Frameworks desktop platforms (“Platforms”), the Forge Frameworks applications (“Applications”), and any other product or service to which Forge Frameworks applies this Agreement (collectively, “Service”), and details how we access, collect, use, and disclose data, including personal data, about you (together, “you” or “your”).

BY CLICKING “I AGREE” OR SIMILAR CONFIRMATION OR BY USING THE SERVICE OR BY AGREEING TO OUR TERMS OF SERVICE, YOU ARE AGREEING TO BE BOUND BY THIS PRIVACY POLICY. YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THIS PRIVACY POLICY AND, WHERE YOUR CONSENT IS REQUIRED BY APPLICABLE LAW, YOU CONSENT TO THE COLLECTION, USE AND DISCLOSURE OF YOUR PERSONAL DATA AS DESCRIBED IN THIS PRIVACY POLICY.

IF YOU ARE AGREEING TO THIS PRIVACY POLICY ON BEHALF OF AN ORGANIZATION, YOU REPRESENT THAT YOU HAVE THE AUTHORITY TO BIND THE ORGANIZATION TO THIS PRIVACY POLICY AND ARE AGREEING TO THIS PRIVACY POLICY FOR THAT ORGANIZATION. WHERE YOU ARE AGREEING TO THE SERVICE ON BEHALF OF AN ORGANIZATION, “YOU” AND “YOUR” REFERS TO THE ORGANIZATION.

1. Description of the Service

As part of the Service, we provide a variety of business-to-business software solutions, including:

• Cookies Privacy Manager (“CPM”), a cookie and privacy consent management platform that enables businesses to obtain, record, manage, and demonstrate visitor consent and preferences regarding cookies and similar technologies;
• FieldForge (“FF”), a cloud-based scheduling and workforce management platform that enables businesses to manage schedules, employees, contractors, customers, jobs, appointments, field operations, and related business activities; and
• other products, applications, features, and services that we may introduce from time to time.

In order to provide the Service to you and for other purposes described below, Forge Frameworks may collect, use and disclose certain personal information (personal data). This Privacy Policy describes how we access, collect and use personal data regarding our users, including you. For clarity, your use of any particular Platform, Website, Application or other Service is governed by the Terms of Service

2. How We Obtain Personal Data

The Service involves accessing, collecting and processing personal information, which is information about you or that can be used to identify you. We obtain personal data that we collect either directly from you when you choose to provide it to us or when you use the Service. Your provision of personal data to Forge Frameworks is governed by this Privacy Policy, and our Terms of Service (“Terms”), which you must agree to in order to use the Service.

If you have any questions or concerns about the disclosure of your personal data, please contact Forge Frameworks at your convenience using the contact information found below. Subject to our legal, contractual and technical requirements, you may choose not to provide Forge Frameworks with certain data or request the deletion of certain data, which may impact Service features available to you or operation of the Service.

3. Personal Data We Collect

We collect and process certain personal data when you begin using the Service. The following is a description of the personal data that we may access, collect, use and process in connection with the Service:

• your name, email address, phone number, business or residential address, third-party sign-in information (if accessing the Service from a third-party account such as your Google Account), contact preferences, account credentials, and other contact or authentication information (“Contact Information”);
• your payment data and information, if you make purchases. All payment data is collected and processed solely by authorized third-parties such as Stripe and RevenueCat, and to which Forge Frameworks does not have direct access (“Payment Data”);
• cookies and similar tracking technologies to track activities on the Service (“Tracking and Cookies Data”);
• your answers to feedback, surveys, newsletters and comments/requests made to you from us through the Website, Platform, Application, email or other form of contact you have previously provided to us (“Feedback Information”);
• basic geolocation data, information about your computer, phone, mobile device, web-connected devices or other devices used to connect to the Service including but not limited to, operating system information, feature usage, request timestamps, error logs, your computer's Internet Protocol address (i.e. IP address), browser type, browser version, operations performed on the device, time and date of Service use, time spent on Service, other diagnostic date and/or unique tokens and identifiers that may identify you over time and across different websites including unique device identifiers (collectively, “Usage Data”);
• where a business user uses our Services to manage its workforce, information about employees, contractors, or other workers that the user provides to or manages through the Services, which may include full name, date of birth, the last four digits of a Social Insurance Number (SIN) or Social Security Number (SSN), email address, telephone number, home address, emergency contact information, job title, employment status, salaries, qualifications, certifications, training or quiz information, location data collected through the FF mobile Application where enabled by the user for scheduling, dispatch or workforce management purposes, and other employment-related information (“Workforce and Employee Information”); and
• where you use CPM on your websites, records of the consent and preference choices made by visitors to those websites, together with associated technical data such as IP address, page URL, timestamp, device information, country, and approximate location (“CPM Consent Records”); and

Forge Frameworks may also collect anonymous data that does not identify you, including but not limited to responses to anonymous surveys and feedback requests, metrics and other types of statistical data, which could be derived from your use of the Service and analytical data concerning the Service. We may also aggregate, anonymize and/or de-identify the personal data we have collected about you for the same purposes. We have implemented commercially reasonable security measures to properly encrypt, anonymize and/or de-identify such data and we do not attempt to re-identify any previously anonymized or de-identified data.

4. Processing of Personal Data

We process personal data primarily for our legitimate business purposes, such as providing the Service to you, to understand your needs and to improve the quality of the Service and analyze the information and data Forge Frameworks collects. These uses include, but are not limited to:

• facilitating account creation, authentication and management of your account;
• providing the Service to you, including tailoring the Service to your needs based on the data that you provide;
• processing and managing your subscription, billing and payment information;
• understanding your needs to improve the quality and reliability of the Service, including providing customer support and feedback, providing additional support, analyzing functionality and technical issues, tracking use of the Service and generating internal reports and data models that we use to improve the Service;
• contacting you for various reasons, including when providing customer support for the Service and sending administrative information to you;
• requesting feedback when necessary and contacting you about your use of the Services;
• identifying how you use our Services and understanding how the Services are being used so we can improve them;
• saving or protecting an individual’s vital interest, such as to prevent harm;
• disclosing personal data as required to comply with our legal obligations and as may be required pursuant to a lawful court order or government request;
• investigating improper or suspicious activity in or on the Service; and
• posting testimonials to our Website. Prior to posting testimonials, we will obtain your express consent to the posting and notify you of the content of the testimonial. If you wish to update or delete your testimonial, please contact Forge Frameworks at your convenience using the contact information found below and include your name, testimonial location and contact information.

We may disclose personal data to our parent companies, affiliates, subsidiaries, business partners, advisors, employees and contractors for the same purposes described above. All such parties are required to enter into confidentiality or similar agreements with Forge Frameworks requiring stringent protection of your personal information.

5. Our Role as a Processor

For personal data that we collect directly from you in connection with your own account and use of the Service, including but not limited to Contact Information, Payment Data, Feedback Information and Usage Data, Forge Frameworks is the organization responsible for (or otherwise the “controller” of) that personal data.

For Workforce and Employee Information, CPM Consent Records and other data that a business user provides to or collects through the Service, including, for example, information about a business user’s employees, contractors, customers or website visitors, Forge Frameworks processes that personal data on behalf of, and under the instructions of, the business user, and the business user is the organization responsible for it. If your personal data has been provided to the Service by a business (for example, your employer, or a website you visited that uses CPM), you should direct requests and questions about that personal data to that business in the first instance, and we will assist that business in responding to your request as required by applicable law and our agreement with that business.

6. Cookies and Digital Tracking Technologies

The Service uses tracking technologies, such as cookies, web beacons and pixels, to collect personal data, such as IP addresses and device information. Based on this data, third parties may be able to resolve your identity across multiple devices. This data is collected, used and disclosed in accordance with the terms of this Privacy Policy and the applicable third-party privacy policies. Where permitted by applicable law, and with your consent where required, we may send communications and marketing information to email addresses associated with the information collected by our cookies and other tracking technologies. You may opt out of receiving this advertising on the Website or by contacting us using the information below. Note that certain essential Service features may rely on tracking technologies and by declining to accept cookies or by changing certain settings on your device, you may not have access to these features.

7. Third Party Services

This Privacy Policy only applies to personal data that Forge Frameworks collects, processes and discloses and does not apply to the access, collection, processing and disclosure of personal data by third parties through third-party services, including, Stripe, Proton, Meta Pixel, Apple, RevenueCat, Maxmind, and Google, which may be broader than set forth in this Privacy Policy, and that may be embedded and/or integrated into the Service. In many cases, third parties may collect personal data about online activities over time and across different websites and services. Forge Frameworks strongly recommends that you carefully read and consent to each third-party privacy policy before using the Service. Forge Frameworks may provide personal data to certain categories of third parties to perform work that is necessary for Forge Frameworks to provide the Services, including:

• cloud computing services;
• communication and collaboration tools;
• data analytics services;
• data storage service providers;
• product engineering and design tools;
• payment processing services;
• testing tools; and
• support tools.

Please contact us directly using the information found below if you would like to learn more about third-party data practices.

8. Legal Basis for Processing Personal Data Under the General Data Protection Regulation

If you are from the European Economic Area (“EEA”), or other jurisdictions in which substantially similar laws apply, such as the United Kingdom, Forge Frameworks’ legal basis for collecting and using the personal data as described in this Privacy Policy depends on the type of personal data Forge Frameworks collects and the context in which it collects it.

The categories of personal data Forge Frameworks collects and the legal basis for its processing are set out below:

We may also process your personal data for additional reasons as they become apparent to comply with the law, or if it is in Forge Frameworks’ legitimate interests so long as that interest is not overridden by your rights. This can include but is not limited to protecting the Services and you against illegal activity, inappropriate behavior and actions that violate Forge Frameworks’ Terms. Forge Frameworks shall update this Privacy Policy and provide you notice where the scope of personal data being processed changes.

For clarity, where we process Workforce and Employee Information, CPM Consent Records or other data on behalf of a business user, the business user is the controller of that personal data and is responsible for establishing the legal basis for its processing. In such circumstances, Forge Frameworks is acting as a processor on behalf of such business user and is processing such data in accordance with its agreement with that business user.

9. European Users and Residents of the European Economic Area

If you are a resident of the EEA, you have certain rights regarding your personal data. These rights include:

• A Right of Access. You have the right to access personal data that we hold about you free of charge in most circumstances;
• A Right to Rectification. If your personal data is inaccurate or incomplete, you can change the information you provided by changing the personal data yourself on the Service, through third-party services or by contacting Forge Frameworks using the e-mail contact listed herein;
• A Right to Erasure. You have the right to obtain deletion of personal data under most circumstances. In most cases, you may simply request the deletion by using the contact information found below. Please be careful as deletion of data in this manner is permanent and the data cannot be recovered;
• A Right to Object. If the processing of personal data is based on legitimate interests according to Article 6(1)(f) of the GDPR or by consent according to Article 6(1)(a) of the GDPR, you have the right to object to this processing. If you object, we will no longer process your personal data unless there are compelling and prevailing legitimate grounds for the processing as described in Article 21 of the GDPR; in particular, if the personal data is necessary for the establishment, exercise or defense of legal claims or if personal data is required for the provision of the Service and you still wish to use the Service;
• A Right to file a Complaint. You have the right to file a complaint with the appropriate supervisory authority in your jurisdiction;
• A Right to Restriction of Processing of your Personal Data. You have the right to obtain restrictions on the processing of your personal data as described in Article 18 of the GDPR;
• A Right to Personal Data Portability. You have the right to receive your personal data in a structured, commonly used and machine-readable format and have the right to transmit such data to another controller under the conditions described in Article 20 of the GDPR;
• A Right to Post-Mortem Control of Your Personal Data. Certain jurisdictions grant post-mortem controls of your personal data and if such rights are applicable in your jurisdiction, you may have the right to establish guidelines for the preservation, the deletion and the transmission of your personal data after your death through a will or through your estate; and
• A Right to Opt-out of Marketing Communications. You have the right to opt-out of marketing communications we send you at any time. If you receive any marketing e-mails from us, you can exercise your right to stop such communications by clicking on the “unsubscribe” or “opt-out” link on any marketing e-mails Forge Frameworks sends you. To opt-out of other forms of marketing, please contact us using the contact details provided below;

Note also that other people, including resident of the United Kingdom or residents of jurisdictions with comprehensive consumer privacy laws may have similar rights to EEA residents as listed above. Forge Frameworks complies with the privacy laws of our customer’s jurisdictions, and should you wish to exercise the rights afforded to you by the laws of your jurisdiction you are encouraged to contact us using the information below with a description of the rights you wish to exercise.

10. Obtaining, Rectifying and Controlling Personal Data

Where permitted under the laws of your jurisdiction, you may contact Forge Frameworks to obtain a copy of any personal data we collect, the production of which may be subject to a fee as permitted by applicable law. In addition, you may contact Forge Frameworks to correct inaccurate personal data or to complete incomplete personal data.

You may be able to opt-out of some or all of the ways in which personal data is processed, or request the deletion of certain personal data, except where the personal data is necessary or vital for:

• the performance of contractual obligations, such as our Terms or certain other legal obligations;
• protecting your interests or those of another person; and
• our legitimate interests or the legitimate interests of a third-party.

To request to review, update or delete personal data, please contact us using the contact information found below.

11. Data Storage and Retention

While Forge Frameworks is a Canadian company, the data provided through the Service may be stored and processed by third parties in countries around the world. By using the Service, you authorize Forge Frameworks and third parties acting on our behalf including, as applicable, cloud hosting providers such as Amazon Web Services and Google Firebase to process your data in Canada, the United States and other jurisdictions in which we or they operate, which may cause to process your data in any country of their choosing, which may cause your data, including personal data, to be subject to privacy protections and legal rights that may not be equivalent to those in your country.

We have implemented measures to protect your personal data, including by ensuring the use of the European Commission’s Standard Contractual Clauses for transfers of personal data between us and our third-party providers and partners. These clauses require all recipients to protect all personal data that they process originating from the EEA, United Kingdom or Switzerland in accordance with European data protection laws and regulations.

You may change the information in your account or terminate your account with Forge Frameworks at any time by logging into your account settings and updating your account. Upon your request to terminate your account, we will deactivate or delete your account and information from our databases. However, we may retain some information for applicable periods as required to allow you to restore your account, prevent fraud, troubleshoot problems, assist with any investigations, enforce our legal terms and/or comply with applicable legal requirements.

Forge Frameworks will only keep your personal data for as long as it is necessary for the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law.

When we have no ongoing legitimate business need to process your personal data and/or your relationship with Forge Frameworks comes to an end, we will promptly return, delete or anonymize any other personal data and confidential information Forge Frameworks has on file, in line with our legal obligations. Where returning, deleting or anonymizing your personal data is not possible, Forge Frameworks will securely store your personal data and isolate it from any further processing until deletion is possible. Any personal data that has been requested to be returned, deleted or anonymized and is stored on a data backup will be held only temporarily and automatically purged after set expiration periods. Please email the contact information below to request deletion of any personal data of yours that Forge Frameworks holds.

12. Do Not Track Disclosure

Do Not Track (“DNT”) is a web or device setting that allows you to request that receivers of personal data stop their tracking activities. When you choose to turn on the DNT setting in your browser or device or use alternative consumer choice mechanisms, your browser or device sends a special signal to websites, analytics companies, advertising networks, plug-in providers and other web services you encounter to stop tracking your activity. Currently, there are no DNT technology standards, and it is possible that there may never be any DNT technology standards. As a result, Forge Framework does not respond to DNT requests at this time. Where required by applicable law, we honor recognized opt-out preference signals such as the Global Privacy Control.

13. Children

Forge Frameworks complies with the U.S. Children’s Online Privacy Protection Act and all other applicable laws and regulations concerning children and the Internet. The Service is not directed to children under the age of 18 and Forge Frameworks does not knowingly solicit data from or market to children under the age of 18. If we learn that we inadvertently collected personal data from a child under the age of 18, we will deactivate the account and take reasonable measures to promptly delete the data from our records. If you are a parent or guardian of a child who you believe provided Forge Frameworks with personal data without your consent, please contact us by using the contact information listed below.

If you are a resident of the EEA below the age of consent in your country, Forge Frameworks shall comply with applicable consent gathering standards required by law in your jurisdiction.

14. California “Shine the Light” Right

If you are a California resident, California Civil Code 1798.83 grants you the right to request disclosure of the categories of personal data we control and have provided to third parties, and the names and addresses of these third parties, for direct marketing purposes during the preceding calendar year. If you are a California resident and would like to make this request, please contact us using the contact information set forth below.

Please note that you may only make this request once per year.

15. Your California Privacy Rights

If you are a California resident, California Civil Code Section 1798.120 permits you to opt-out of the sale and sharing of your personal data to third parties. Currently, Forge Framework does not sell your personal data to third parties except as directly requested with your consent and as such no opt-out of the sale of such personal data is necessary. Note that certain essential Service features may rely on third-party advertising and analytics technologies which may constitute “sharing” of personal data for cross-contextual behavioural advertising as defined under California Law. As such, you may opt out by using the contact information below, or as applicable, through any cookie preference tools available on the Website. Forge Frameworks does provide a right to opt out of third-party sharing to all our users. If you have any other questions about our privacy practices, please email us using the contact information provided below.

16. Change of Ownership or Business Transition

In the event of, or in preparation for, a change of ownership or control of Forge Framework or a business transition such as the sale of some or all Forge Frameworks’ assets, we may disclose and/or transfer your personal data to third parties who will have the right to continue to collect and use such data in the manner set forth in this Privacy Policy. Forge Frameworks will only disclose such personal data where the disclosure is subject to adequate privacy and confidentiality protections to ensure the security of your personal data in any proposed change of ownership or business transition.

17. Security

We are committed to ensuring that your data is secure. To prevent unauthorized access, disclosure, or breach, we have put in place suitable physical, electronic, and administrative procedures to safeguard and secure the data we collect and process. Despite our safeguards and security, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal or modify your information. Transmission of personal data to and from our Services is at your own risk. You should only access the Services within a secure environment.

18. Contact Preferences

Forge Frameworks primarily communicates with you through the Service itself but may also communicate with you through your email address or other digital methods to conduct the Service and to respond to support requests or comments. If you have provided us with your email address and would like to change the email preferences we associate with you (for example, unsubscribing from receiving certain types of email) you may do so by clicking a link within certain types of emails that we send to you or, if no link is available, by replying with “unsubscribe” in the email title or body. You may also update your contact preferences, including the types and frequency of communications you receive from us, through the applicable settings in your user profile. On rare occasions, some types of email are necessary for the Service and cannot be unsubscribed from if you continue to use the Service.

19. Updates

Forge Frameworks reserves the right, in its sole discretion, to modify this Privacy Policy at any time (each an “Update”) and shall make each Update available on our Website, indicated by an updated “Last Updated” date. You are deemed to accept an Update by continuing to use the Service. Unless Forge Framework states otherwise, an Update is automatically effective 30 days after posting on the Website, except in such case where an Update is immaterial to any of your legal rights or legal obligations of Forge Framework and such Update is made only to correct a typographical, formatting or grammar inaccuracy, and in such case, an Update is effective immediately after posting on the Website.

20. Contact Us

If you have any requests, questions or comments about the Privacy Policy or our data collection in general, please contact our Data Privacy Officer or our Privacy Team at privacy@forgeframeworks.ca or by post at:

Forge Frameworks Inc.
PO Box 55063 Edmonton RPO
Windermere, AB, T6W 5B4