Privacy Policy

Last updated: May 13, 2026

Overview

This Privacy Policy explains how BOS Framework ("we," "us") collects, uses, and protects information when you use Forge ("the Service"). By using the Service you agree to the practices described here.

Information we collect

Account information. When you register, we collect your email address and a password hash. We never store your password in plain text.

Organization & project data. Organizations, teams, projects, members, invitations, and policies you configure within the Service are stored in our database to provide the Service.

Workflow artifacts. Documents you generate through Forge's chat interface — vision documents, requirements, designs, schemas, supporting diagrams, and so on — are persisted under your organization's account so your team can revisit and iterate on them.

Knowledge documents. Files you upload as project knowledge are stored on our servers and indexed for retrieval. We process the contents to generate brief summaries that help the AI understand what each document is.

Conversation history. Chat messages between you and Forge's AI agents are stored against the relevant project step so your team can review the reasoning behind an artifact.

Cookies. We use cookies to keep you signed in (authentication), remember your preferences ("remember organization," "last visited project"), and maintain your active organization context. We do not use third-party advertising or tracking cookies.

How we use information

  • To provide the Service and let you collaborate on artifacts within your organization.
  • To send your prompts and selected supporting context to Large Language Model (LLM) providers — currently Anthropic and OpenAI — to generate responses.
  • To compute embeddings of your knowledge documents (via OpenAI) so the AI can retrieve relevant passages during a conversation.
  • To diagnose errors and improve the Service.

Third-party processing

Forge sends content to LLM providers to fulfill your requests. Each provider processes this content per their own privacy and data-use policies:

We do not sell your data, share it with advertisers, or use it for marketing.

Retention

We retain your data for as long as your account is active. You can request deletion of your account or specific projects at any time by contacting us at the address below.

Your choices

  • Access and export. You can view and export the artifacts you have generated through the Service.
  • Deletion. You can delete a project, organization, or your account; deletion is permanent.
  • Cookies. You can clear cookies from your browser at any time. Some Service features will be unavailable without authentication cookies.

Children

Forge is intended for use by businesses. It is not directed to children under 16, and we do not knowingly collect data from children under 16.

Changes

We may update this policy from time to time. We will indicate the "Last updated" date at the top when we do.

Contact

For privacy questions or to request data access or deletion, contact us at contact@bosframework.com.