Privacy Policy
This Privacy Policy explains how Arrowtrack Solutions ("Arrowtrack," "we," "us," or "our") collects, uses, and protects information in connection with Forge (the "Service"), a white-label quoting and client-portal platform. We are located in Carpinteria, California, United States. By using the Service, you agree to this Policy.
1. Information we collect
We collect:
- Account information — when you create a Studio account, we collect your name, email address, organization name, and a securely hashed password.
- Content you provide — your branding (logo, colors, contact details), pricing, project details, quotes, scopes of work, and information you enter about your own clients (such as a client's name, email, and project).
- Usage and technical data — basic information needed to operate the Service, such as session cookies for keeping you logged in, and standard server logs (for example, request times and error information).
2. Roles: controller and processor
For account information about you and your Studio, we act as a data controller. For information you enter about your own clients, you are the controller and we act as a data processor — we process that information on your behalf, to provide the Service. You are responsible for having a lawful basis and any necessary notices or consents for the client information you submit.
3. How we use information
- to provide, operate, and maintain the Service;
- to authenticate you and keep your session secure;
- to generate and display your quotes, scopes of work, and client portals;
- to communicate with you about your account or the Service; and
- to protect the security and integrity of the Service and comply with law.
We do not sell your personal information, and we do not use your clients' information for our own marketing.
4. Cookies
We use a single, essential session cookie to keep you signed in. It is strictly necessary for the Service to function and is not used for advertising or cross-site tracking. Client portals are accessed through a private link and do not require visitors to sign in.
5. How we share information
We share information only as needed to run the Service:
- Infrastructure providers — we use third-party hosting and cloud providers to operate the Service. They process data on our behalf under their own security and privacy commitments.
- Legal and safety — we may disclose information if required by law or to protect the rights, safety, or property of Arrowtrack, our users, or others.
- Business transfers — if Arrowtrack is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction.
6. Data retention
We retain account and content information for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data; we will delete or anonymize it within a reasonable period, except where we must retain it to comply with legal obligations.
7. Security
We use reasonable technical and organizational measures to protect information, including password hashing and encrypted connections (HTTPS). No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
8. Your rights
Depending on your location, you may have rights to access, correct, delete, or export your personal information, or to object to or restrict certain processing. To exercise these rights, contact us using the details below. If you are an end client of a Studio and wish to exercise rights regarding your information, please contact that Studio directly; we will assist them as their processor.
9. Children
The Service is intended for businesses and is not directed to children under 16. We do not knowingly collect personal information from children.
10. International users
We operate from the United States. If you access the Service from outside the U.S., you understand that your information may be processed in the United States, where data-protection laws may differ from those in your country.
11. Changes to this Policy
We may update this Policy from time to time. If we make material changes, we will update the effective date above and, where appropriate, provide additional notice within the Service.
12. Contact
Questions or privacy requests? Contact Arrowtrack Solutions at matthew.nancarrow@gmail.com.