Privacy policy.

1. Introduction

BlockForge Technologies LLC ("we", "us", "our") operates the StageForge platform at stageforge.app. This Privacy Policy explains how we collect, use, and protect your personal information when you use our services.

2. Information we collect

Account information

When you register, we collect your name, email address, and optionally a Google account identifier for OAuth login.

Site technical data

When you connect a WordPress site, our plugin collects technical metadata: WordPress version, PHP version, database size, and site file size. No content, user data, or personal information from your WordPress site is collected outside of the encrypted backup archive used for staging provisioning.

Billing information

We do not sell to you directly. Checkout runs through a merchant of record, who is the seller on your invoice, collects the payment, and handles VAT and sales tax. They are an independent controller for the payment data you enter, under their own privacy policy — your card details are never sent to us and we could not store them if we wanted to. What reaches us is the record that a purchase happened: an order reference, the amount, and the billing country.

Usage logs

API requests, staging lifecycle events, and platform interactions are logged for operational reasons. Staging activity is deleted after 90 days, or immediately when you delete the site it belongs to; server-side request logs rotate on a shorter cycle.

3. How we use it

• To provision, run, and destroy staging environments.
• To authenticate API requests and bill for usage.
• To respond to support requests and diagnose issues.
• To send transactional emails (account, billing, staging lifecycle).

We do not use your data for advertising. We do not sell or rent your data. We do not share it with third parties except the categories of processors listed below.

4. Processors

We engage processors in the following categories — companies that process data on our instructions. All processing of your site data takes place inside the EU. The current list of named sub-processors is available on request at hello@stageforge.app, and we will tell you before we add or replace one.

Our merchant of record is deliberately not in this list. They are not acting on our instructions when they take your payment — they are the seller, and their own privacy policy governs what they do with the data you give them at checkout.

• Hosting providers — the servers running the platform and the servers running your staging containers.
• Object storage — where your backup archive is written and where staging snapshots are kept.
• Transactional email — account, billing and staging-lifecycle messages, and the contact form.
• CDN and DDoS protection — for our public website.

5. Data retention

• Backups: deleted from storage shortly after the staging they were made for ends — within about half an hour by default.
• Snapshots you create for download: 24 hours, then deleted from storage.
• Activity logs: 90 days, then deleted automatically. Deleting a site removes its log immediately rather than waiting out the window.
• Account data: retained while your account is active; deleted within 30 days of account closure.
• Purchase records we hold (order reference, amount, billing country): retained as long as tax and accounting rules require. The payment data itself sits with the merchant of record, not with us.

6. Your rights (GDPR / CCPA)

You have the right to access, correct, export, or delete your personal data. Contact privacy@stageforge.app. We respond within 30 days.

7. Security

All data in transit uses TLS 1.3. All backups and credentials are encrypted at rest with AES-256-GCM.

8. Changes

We may update this policy. Material changes will be emailed to account holders 30 days before taking effect.

9. Contact

StageForge — a product of BlockForge Technologies LLC
Wyoming, USA
privacy@stageforge.app