Privacy Policy

Supraforge ("we", "us") operates the SEO automation platform at supraforge.one. The data controller for Supraforge is Alan Cope (sole proprietor), 11500 Jollyville Rd #913, Austin, TX 78759, USA. Privacy questions and requests: support@supraforge.one or by mail at the address above.

To run scans, generate fixes, push approved changes to your CMS, run the community and marketplace, send reports and transactional email, provide support, prevent abuse, and bill you. We do not sell personal data.

Optimization suggestions and content are produced by third-party large language models routed through providers including OpenRouter, Groq, Google Gemini, and (for voice) ElevenLabs. Page content, metadata, and prompts you submit are sent to those providers solely to generate the requested output. We do not use your data to train external models, and we do not sell your prompts.

Supabase (auth + database + storage), Stripe (payments), Cloudflare (delivery), Firecrawl / ScrapingBee (crawling), OpenRouter / Groq / Google Gemini / ElevenLabs (AI inference and voice), Semrush (SEO data), Resend (email delivery), Google (Search Console, Analytics, Business Profile), Meta / TikTok / LinkedIn (only if you connect a social account). Each operates under its own terms; we maintain DPAs where applicable.

Scan results, repair logs, generated content, and community messages are retained while your account is active and for 90 days after deletion, then permanently erased. Billing records are retained for 7 years to meet tax and accounting obligations. You can request earlier deletion of eligible data at any time by emailing support.

Access, correction, export, and deletion. Email support@supraforge.one and we will respond within 30 days. GDPR, UK GDPR, CCPA/CPRA, and similar laws apply where relevant, including the right to object to processing and to lodge a complaint with your local data-protection authority.

TLS in transit, encryption at rest, row-level access control on all customer data, audit logging on repair actions, service-role isolation for privileged writes. No system is perfectly secure; report vulnerabilities to security@supraforge.one.

We use strictly-necessary cookies for authentication and session state (always on). With your consent (via the cookie banner) we also use analytics cookies (Google Analytics 4) and ad-measurement pixels (Google Ads, Meta, TikTok) to understand traffic and measure campaign performance. Consent is enforced through Google Consent Mode v2 — if you reject non-essential cookies, ad and analytics storage stay denied and pixels do not receive personally identifying data. You can change your choice any time by clearing site data or by revisiting the banner from a private window.

Posts, replies, and public chat-room messages are visible to all signed-in members. Direct messages are private to the participants but may be reviewed by Supraforge staff when reported for abuse. Do not share information in the community that you consider confidential.

Data may be processed in the United States and other countries where our subprocessors operate. Where required, transfers rely on Standard Contractual Clauses or equivalent safeguards.

Supraforge is not intended for children under 16 (or the digital-consent age in your country, whichever is higher). See Section 2 of the Terms.

We will post material changes here and notify active customers by email at least 14 days before they take effect.