Privacy Policy

1. Scope & Definitions

This Privacy Policy applies to forkecast.com, our web apps, and related services (collectively, the “Service”). “You” means a customer, employee, contractor, or site visitor who interacts with the Service.

2. Information We Collect

• Account & Profile: name, email, organization, role, passwords (hashed), and preferences.
• Business Content: menus, vendors, SKUs, schedules, messages, requests, and related metadata you upload or generate.
• Usage & Device: IP address, device identifiers, browser type, pages visited, referring URLs, and interaction data.
• Payment: billing details processed by our payment provider (we don’t store full card numbers).
• Support: information you provide in tickets, chats, or calls.

3. How We Use Information

• Provide, maintain, and improve the Service.
• Personalize experiences (e.g., saved settings, role‑based access).
• Communicate service updates, security alerts, and administrative messages.
• Process payments and send billing notices.
• Detect, prevent, and address fraud, abuse, or technical issues.
• Comply with legal obligations and enforce our Terms.

4. Legal Bases (EEA/UK)

Where GDPR/UK GDPR applies, we process personal data under the following legal bases: (i) performance of a contract; (ii) legitimate interests (e.g., securing and improving the Service); (iii) compliance with legal obligations; and (iv) consent where required.

5. Cookies & Similar Technologies

We use cookies and similar technologies for authentication, preferences, analytics, and performance. You can control cookies via your browser settings. Some features may not function without certain cookies.

6. Analytics & Advertising

We may use analytics tools to understand usage and improve the Service. We do not sell your personal information. We may use limited data for remarketing or audience measurement consistent with applicable law and your choices.

7. How We Share Information

• Service Providers: hosting, analytics, payments, customer support, email/SMS providers under contract.
• Compliance & Safety: to comply with law, respond to lawful requests, or protect rights, property, and safety.
• Business Transfers: in connection with mergers, acquisitions, or asset sales, subject to confidentiality.

8. International Transfers

If we transfer personal data internationally, we use appropriate safeguards (e.g., Standard Contractual Clauses) where required by law.

9. Data Retention

We retain information for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods may vary by data type and use case.

10. Security

We implement reasonable technical and organizational measures to protect information. No method of transmission or storage is completely secure.

11. Your Rights & Choices

• Access, correct, or delete your personal information.
• Object to or restrict certain processing; portability where applicable.
• Opt out of marketing communications using the links in our messages.
• Where consent is the legal basis, you may withdraw consent at any time.

To exercise rights, contact us using the details below. We may ask you to verify your identity.

12. Children’s Privacy

The Service is not directed to children under 16, and we do not knowingly collect personal information from them.

13. California Privacy (CPRA)

California residents have rights regarding access, deletion, correction, and limitation of use/disclosure of sensitive personal information, subject to exceptions. We do not sell personal information or share it for cross‑context behavioral advertising. You may designate an authorized agent to make requests on your behalf subject to verification.

14. Changes to this Policy

We may update this Privacy Policy from time to time. We will post updates on this page and update the effective date. Material changes may be communicated through the Service or by email where appropriate.

15. Contact Us

Questions or requests? Contact us at privacy@forkecast.com.

If you need a Data Processing Agreement (DPA) or vendor security questionnaire, please reach out.