Privacy Policy

Last updated: 26 August 2026.

1. Controller

The controller is ANDROS EMIL-ROBERT PERSOANA FIZICA AUTORIZATA, VAT number RO43707383. Privacy requests: [email protected].

2. Data we process

We process account and contact details; billing details and company information; order contents, delivered files and license status; payment, refund, invoice and Stripe reference data; support messages and technical details you choose to provide; IP address, device and browser information; security logs; locale and country preferences; and records of policy consent.

Stripe collects and processes card data, billing details, Tax IDs and fraud signals in its own PCI-compliant systems. Forgeport does not receive or store full card numbers.

3. Purposes and legal bases

We use this data to create and manage accounts; enter into and perform purchase contracts; calculate tax; take payment; deliver, license and support products; prevent fraud and abuse; secure the shop; issue and reconcile invoices or refunds; and comply with tax, accounting, sanctions, consumer-protection and lawful-request duties.

The legal bases are performance of a contract, legal obligation and our legitimate interests in operating, improving and securing the shop. Where consent is required for a specific optional technology or communication, consent is the legal basis and may be withdrawn.

4. Providers and recipients

• Stripe for checkout, payments, Stripe Tax, Tax ID verification, fraud prevention, invoices, credit notes and refunds.
• Cloudflare for network delivery and security.
• Resend for transactional email.
• Vercel for storefront delivery and privacy-focused performance analytics.
• Hosting, database and professional providers used to operate the shop under appropriate confidentiality and data-protection terms.

We may disclose data where required by law, to protect legal rights, or in a business reorganisation. We do not sell personal data or use order data for third-party advertising.

5. International transfers

Some providers may process data outside the EEA. Where required, transfers rely on an adequacy decision, Standard Contractual Clauses or another lawful safeguard made available by the provider.

6. Retention

Order, payment, invoice, refund and tax records are kept for the period required by applicable tax, accounting and consumer-protection law. Account, license and support data is kept while needed to provide the product, protect the service or handle a legal claim, then deleted or anonymised. Backups use a limited rolling schedule.

7. Your rights

Subject to law, you may request access, correction, deletion, restriction, portability or objection, and lodge a complaint with your local authority. In Romania, the authority is ANSPDCP. Contact [email protected]. Records the law requires us to retain cannot be deleted early.

8. Security and changes

We use access controls, encryption in transit, restricted secrets, backups and payment-provider controls. No system is completely risk-free. Material changes will be published here with a new date.

Website template claim and activation data

For template claims and activation, Forgeport Shop records the customer email, Shop user and order references where available, template and license identifiers, activation state, the selected Forgeport Organization identifier, acting Forgeport user identifier, timestamps, download versions and refund state. Forgeport may provide the authenticated account email for an in-product free Aurelian claim so the customer is not asked to enter it again or sent through payment checkout.

These records are used to perform the license contract, secure activation and downloads, prevent replay and cross-Organization access, handle refunds, and keep required commercial and audit records. They are not used for cross-context behavioural advertising.