Privacy Policy

This Privacy Policy describes how Upforge ("we," "us," or "our") collects, uses, and shares personal information when you visit upforge.io, interact with our social and marketing channels, submit one of our website forms, book a call through our scheduler, or engage our services.

By using our website or services, you agree to the practices described here. If you disagree, please discontinue use and contact us with any questions.

• Contact & Business Details: first and last name, email, phone, company, and any project details you give us in our contact, free-audit, or newsletter forms, for example your website address, your goals, and the challenges you're facing with your current site or software.
• Usage & Analytics Data: we run our own first-party analytics through the Sonor platform rather than a third-party ad network. It records pages viewed, referring and exit pages, device and browser type, approximate location from your IP address, page-load performance metrics, and how far down each page you scroll. It's worth being specific about two of these, because they go further than a simple page counter:
  • Click and heatmap tracking: we record where on a page you click, including the position of the click, so we can see which parts of a page people actually use.
  • Session journeys: we stitch your page views together into a single visit, so we can see the whole path you took through the site and whether it ended in a form submission. A first-party identifier stored in your browser lets us recognize repeat visits.
• Website Audit Requests: when you request a free audit, we collect the website address you submit along with your contact details. Our audit software in Sonor fetches that site's publicly accessible pages and files, such as robots.txt and the sitemap, and sends the address to Google's PageSpeed Insights API, which fetches and scores the page. The written report is produced through Signal AI, powered by OpenAI. Public-page content, audit measurements and screenshots used for the review may be sent to OpenAI to analyze the site and generate the report. We email you a link to the report. The audit doesn't log in to your site or test anything behind a login.
• Booking & Scheduling Data: when you book a call through our scheduler, we collect your name, email, phone, the time slot you choose, and anything you write in the booking notes. The booking is written to our calendar so we can hold the time. We keep your contact details in our CRM and, when connected, our Google Contacts address book so we can follow up.
• Spam Prevention Data: every form carries a hidden field that people never see and bots tend to fill in, and we record how long the form was on screen before it was sent. We also pass what you wrote to an AI service that judges whether it reads like a real enquiry. See the third-party note below.
• Client Project Data: assets and information necessary to deliver our services (e.g., brand materials, copy, images, and website or application content).

We use cookies and similar browser storage (localStorage and sessionStorage) to operate our site, remember preferences, and analyze performance. You can control cookies and clear browser storage via your browser settings. Some features may not function properly without them.

• Essential: required for core functionality (e.g., page navigation and form submissions, including the timing signal that helps us keep the forms free of spam).
• Analytics: first-party visitor and session identifiers that let us measure site performance, understand how pages are used, and connect a form submission back to the visit that produced it.

We don't run advertising pixels or third-party ad-network trackers on this site, and we don't use cookies to target you with ads elsewhere.

• Respond to inquiries and provide quotes or consultations.
• Deliver, manage, and improve our services and client projects.
• Operate, analyze, and enhance our website experience and content.
• Send service messages and, with your consent where required, marketing communications.
• Protect against fraud, abuse, and security risks, and comply with legal obligations.

Legal bases (where applicable): consent, performance of a contract, legitimate interests (e.g., site security, service improvement), and compliance with law.

We don't sell your personal information. We may share limited data with:

• Sonor (our platform): upforge.io runs on Sonor, our own business platform. Every form submission, booking, audit request, and analytics event on this site is sent to and stored in Sonor, which acts as our data processor and CRM.
• OpenAI: to tell real enquiries from spam, the content of a form submission is sent to OpenAI for classification. Signal AI also uses OpenAI to analyze public-page content, screenshots and measurements for requested website audits and generate report text. We stopped using Google reCAPTCHA in August 2026, so no device or behaviour signals are shared with Google for spam scoring.
• Google PageSpeed Insights: website addresses submitted to our free audit are sent to Google's PageSpeed Insights API so it can fetch and score the page.
• Google Maps: our contact page embeds a Google Map. Loading that page loads content from Google, which can see your IP address and set its own cookies.
• Calendar & Scheduling: bookings you make through our scheduler are written to our business calendar so we can hold and confirm the time.
• Other Service Providers: website hosting, email delivery, and payment or invoicing providers, and security tools.
• Professional Advisors: legal, accounting, and insurance advisors as needed.
• Legal & Safety: to comply with law, enforce policies, or protect rights, property, and safety.
• Business Transfers: in a merger, acquisition, or asset sale, consistent with this policy.

Important: All the above categories exclude text messaging originator opt-in data and consent; this information won't be shared with any third parties.

• Access / Portability: request a copy of the data we hold about you.
• Correction: ask us to update or correct inaccurate information.
• Deletion: request deletion where applicable (subject to legal exceptions).
• Opt-Out: unsubscribe from marketing or limit cookies/analytics as permitted.
• Objection / Restriction: where applicable under GDPR or similar laws.

To exercise rights, email privacy@upforge.io with your request and sufficient information to verify your identity.

Questions or requests about this Privacy Policy?

This page is provided for transparency and doesn't constitute legal advice. For specific legal guidance, please consult your counsel.