ForgePeak

This Privacy Policy describes how ForgePeak LLC ("ForgePeak," "we," "us") collects, uses, and protects information when advisory firms use The ForgePeak platform and when prospects register for webinars or otherwise interact with firm-hosted pages powered by ForgePeak.

Who this applies to

Advisor users — individuals who create a workspace and use the dashboard.
Prospects and leads — individuals who register for webinars, book appointments, or whose information is imported by an advisory firm using the platform.

Information we collect

Account information (name, email, firm name) for advisor users.
Lead and registration data submitted by prospects (name, email, phone, location, qualification responses, marketing attribution).
Consent records including timestamp, consent text version, and technical metadata where captured.
Activity logs for pipeline changes and marketing communications sent through the platform.
Usage and operational logs required to operate and secure the service.
If an advisor connects Google Calendar: OAuth tokens, the connected Google account email, free/busy availability windows needed to offer booking slots, and calendar event identifiers for appointments created through ForgePeak (see Google Calendar below).

How we use information

Provide webinar registration, lead pipeline, and appointment tools.
Send transactional and marketing emails on behalf of the advisory firm when the prospect has provided consent and has not opted out.
Support compliance recordkeeping for participating firms.
Improve, secure, and troubleshoot the platform.
When Google Calendar is connected: show available booking times and create calendar events (with optional Google Meet links) for prospect appointments the advisor chooses to accept through ForgePeak.

Google Calendar and Google user data

ForgePeak's use of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

What we access: with the advisor's consent, we request calendar.events (to read free/busy availability and create booking events) and userinfo.email (to show which Google account is connected).
How we use it: solely to provide user-facing booking features — checking open slots against the advisor's calendar and creating events when a prospect books. We do not use Google user data for advertising, credit decisions, or selling data.
What we store: OAuth access/refresh tokens (encrypted in transit; stored for the connected workspace), connected account email, and identifiers/links for events ForgePeak creates. We do not store full calendar contents or unrelated event details.
Sharing: Google Calendar data is not sold. It is not shared with third parties except as needed to operate the service (e.g. hosting/database providers under contract) or when the advisor directs an invite to a prospect's email via Google Calendar.
Revoking access: advisors can disconnect Google Calendar in Settings at any time, which stops further API use. Advisors may also revoke ForgePeak in their Google Account permissions.
More detail: Google Calendar integration.

United States

ForgePeak is designed for use by SEC- and FINRA-regulated advisory businesses. Firms remain responsible for their regulatory obligations, including books-and-records, marketing communications, and privacy notices to clients and prospects. ForgePeak provides consent capture, opt-out handling, activity history, and export tools to support those obligations. We do not provide legal or compliance advice.

Canada

For Canadian advisory firms, ForgePeak supports PIPEDA-aligned practices including purpose-limited collection, consent capture on registration, unsubscribe mechanisms for commercial electronic messages (CASL), and access to lead records through the firm's dashboard. Firms may link their own privacy policy on registration pages.

Subprocessors

We use trusted infrastructure providers to operate the platform, including:

Vercel — application hosting
Neon — PostgreSQL database
Resend — transactional email delivery
Stripe — subscription billing (when enabled)
Vercel Blob — optional file storage for logos and images

See our compliance overview for advisor-facing details.

Data retention and deletion

Advisory firms control prospect data in their workspace. Firms may export or delete records through the dashboard. Contact your advisory firm or ForgePeak support for access or deletion requests related to your personal information.

Security

We use encryption in transit (HTTPS), tenant isolation between organizations, authenticated access for advisor users, and signed webhook verification for integrations.

Contact

Privacy questions: contact your advisory firm for prospect data, or email the address listed on your firm's registration page. Platform questions may be directed through the in-app feedback form or your ForgePeak account representative.