Privacy Policy
Last Updated: January 2025
Your privacy is important to us. This policy explains how The FORGE Spiritual Academy collects, uses, and protects your information.
The FORGE Spiritual Academy ("we," "us," or "our") is a 501(c)(3) nonprofit organization committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website theforgeacademy.global and use our services.
Information We Collect
Personal Information You Provide
When you register, subscribe, or use our services, we may collect:
- Name and email address
- Phone number (if you opt-in for SMS notifications)
- Payment information (processed securely through Stripe)
- Course progress and learning data
- Forum posts, comments, and community interactions
- Journal entries and reflection responses
Automatically Collected Information
When you access our platform, we automatically collect:
- IP address and browser type
- Device information and operating system
- Pages visited and time spent on pages
- Referring website addresses
How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain our educational services
- Process your subscription payments and transactions
- Send you course materials, updates, and communications
- Personalize your learning experience
- Respond to your inquiries and provide customer support
- Send administrative information, such as updates to our terms and policies
- Monitor and analyze usage and trends to improve user experience
- Prevent fraudulent activity and enhance security
- Comply with legal obligations
Google User Data
What Google Data We Access
When you authorize our application through Google OAuth, we may access:
- Your Google Calendar events (read-only access)
- Your email address (for account identification)
- Your basic profile information (name, profile picture)
How We Use Google Data
We use your Google Calendar data solely to:
- Display your availability for scheduling mentorship sessions and pastoral meetings
- Help you schedule and manage ministry appointments within our platform
- Prevent scheduling conflicts when booking sessions with mentors, coaches, or leaders
- Send you meeting reminders and notifications about scheduled sessions
We use Google data ONLY to provide and improve our application's functionality. We do NOT use Google data for:
- Targeted advertising or personalized ads
- Training AI models
- Selling to data brokers or information resellers
- Credit-worthiness determination or lending purposes
- Any purpose unrelated to our core educational and ministry services
How We Share Google Data
We do NOT sell, rent, trade, or transfer your Google user data to any third parties.
Your Google Calendar data may only be accessed by:
- You (the account owner)
- Authorized pastoral staff or mentors you choose to schedule with (only to view availability, not calendar details)
- Our secure backend systems (Google OAuth-authorized, encrypted in transit and at rest)
We will only share Google data if required by law (e.g., valid subpoena or court order) or with your explicit consent.
Google Data Security
We implement industry-standard security measures to protect your Google user data:
- All Google data transmissions are encrypted using HTTPS/TLS protocols
- OAuth access tokens are securely stored and encrypted at rest
- Access to Google data is restricted to authorized systems and personnel only
- We follow Google's API Services User Data Policy and security best practices
- Regular security audits and vulnerability assessments
Data Retention and Deletion
We retain your Google user data only for as long as necessary to provide our services:
- Google Calendar access is maintained only while your account is active
- You can revoke our access to your Google data at any time through your Google Account settings
- When you delete your account or revoke access, we immediately stop accessing your Google data
- Cached Google data (e.g., availability information) is deleted within 30 days of account deletion or access revocation
To request deletion of your Google data, email us at info@theforgeacademy.global or revoke access directly through Google Account Permissions.
Google API Services User Data Policy Compliance: The FORGE Spiritual Academy's use and transfer of information received from Google APIs adheres to Google API Services User Data Policy, including the Limited Use requirements.
How We Share Your Information
We may share your information with:
- Service Providers: Third-party vendors who assist us in operating our platform (e.g., Stripe for payments, Base44 for hosting, ElevenLabs for text-to-speech)
- Legal Requirements: When required by law, subpoena, or other legal process
- Business Transfers: In connection with a merger, acquisition, or sale of assets (unlikely as a nonprofit)
- With Your Consent: When you explicitly consent to sharing your information
We do NOT sell, rent, or trade your personal information to third parties for marketing purposes.
Data Security
We implement appropriate technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:
- Encryption of data in transit and at rest
- Regular security assessments
- Restricted access to personal information on a need-to-know basis
- Secure payment processing through Stripe (PCI DSS compliant)
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
Your Privacy Rights
You have the right to:
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your personal information (subject to legal obligations)
- Opt-Out: Unsubscribe from marketing emails or SMS notifications at any time
- Data Portability: Request a copy of your data in a structured, machine-readable format
To exercise these rights, please contact us at info@theforgeacademy.global
Cookies and Tracking Technologies
We use cookies and similar tracking technologies to track activity on our platform and store certain information. Cookies help us:
- Remember your login session
- Understand how you use our platform
- Personalize your experience
- Analyze site traffic and usage patterns
You can control cookies through your browser settings. However, disabling cookies may affect your ability to use certain features of our platform.
Data Retention and Deletion
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
Retention Periods
- Account information: Retained while your account is active, plus up to 1 year after account deletion (to enable seamless return)
- Course progress and learning data: Retained for up to 1 year after account closure to restore your progress if you return
- Payment records: Retained for 7 years to comply with tax and accounting regulations
- Google Calendar data: Cached data deleted within 30 days of access revocation or account deletion
- Forum posts and community content: Retained indefinitely unless you request deletion
How to Request Deletion
You can request deletion of your data by:
- Deleting your account through your Settings page (self-service)
- Emailing us at info@theforgeacademy.global
- Revoking Google access through Google Account Permissions
Upon receiving a deletion request, we will delete your personal information within 30 days, except where retention is required by law.
Children's Privacy
Our services are intended for adults aged 18 and older. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us immediately, and we will take steps to delete such information.
Third-Party Websites
Our platform may contain links to third-party websites (e.g., Amazon affiliate links, Blue Letter Bible references). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. Your continued use of our services after such modifications constitutes your acknowledgment and acceptance of the updated policy.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Email: info@theforgeacademy.global