WorkForge Privacy Policy

Operated by ConForge AI LLC

Effective date: October 11, 2026
Last updated: October 11, 2026

1. Introduction

ConForge AI LLC (“ConForge,” “we,” “our,” or “us”) operates WorkForge, an AI-powered personal assistant designed to help individuals and businesses manage everyday work, coordinate information, and complete tasks across their existing applications.

WorkForge includes ForgeClaw, an assistant for everyday professional tasks, and ForgeMeet, an assistant focused on meetings, summaries, and follow-up actions. WorkForge may be accessed through supported desktop applications, mobile applications, web interfaces, and integrations such as Microsoft Teams.

This Privacy Policy explains how we collect, access, process, use, disclose, and protect personal information when you visit our website, use WorkForge, connect third-party applications, or communicate with us.

We recognize that an assistant used for professional work may encounter confidential business information, personal communications, documents, calendars, and meeting content. Our approach is to provide useful functionality while respecting the permissions, systems, and privacy choices of our users.

WorkForge is designed to work with your existing applications and systems rather than requiring you to move all your business information into a separate ConForge-controlled content repository.

By using WorkForge, you acknowledge that you have read this Privacy Policy. Where applicable law requires consent for a particular processing activity, we will obtain that consent separately.

2. Who We Are

WorkForge is operated by:

ConForge AI LLC
Louisiana, United States

Website: conforge.si/workforge
Privacy inquiries: admin@conforgeai.com
Security inquiries: tech@conforgeai.com

Depending on the circumstances and applicable law, ConForge may act as a business or data controller when determining the purposes and means of processing personal information. Where we process personal information on behalf of a customer organization, we may act as a service provider or data processor under the relevant agreement.

3. Scope of This Policy

This Policy applies to personal information processed through:

• The WorkForge website and associated landing pages.
• WorkForge accounts, applications, interfaces, and features.
• ForgeClaw and ForgeMeet.
• Supported desktop, mobile, browser, and messaging integrations.
• Connected email, calendar, document, meeting, and business applications.
• Customer support, product feedback, and communications with ConForge.
• Website analytics, technical diagnostics, and security operations.

This Policy does not govern the independent privacy practices of third-party applications, services, or websites. Those services may have their own privacy policies and terms.

If you access WorkForge through your employer or another organization, a separate organizational agreement or privacy notice may also apply.

4. Information We Collect and Process

The information involved in your use of WorkForge depends on the features you use, the applications you connect, the permissions you grant, and the configuration selected by you or your organization.

4.1 Account and Profile Information

We may collect information needed to create and administer an account, including:

• Name and email address.
• Account identifiers and authentication-related information.
• Organization, company, or workspace details.
• Role, job title, or profile information you choose to provide.
• Account status and application preferences.
• Subscription or billing information, if applicable.

Payment information, where relevant, may be handled directly by a third-party payment processor.

4.2 Information from Connected Applications

When you connect a third-party application, WorkForge may access information made available through that application within the permissions you authorize.

Depending on the integration and features enabled, this may include:

Email and messaging

• Email messages, subject lines, senders, recipients, and relevant metadata.
• Attachments and communication history relevant to a task.
• Drafts, replies, and messages available through supported integrations.

Calendars and scheduling

• Calendar events, dates, times, and availability.
• Meeting invitations, descriptions, and attendee information.
• Scheduling preferences and relevant event details.

Documents and files

• Documents, attachments, file contents, and file names.
• File locations, metadata, and access permissions.
• Information retrieved to answer questions or complete tasks.

Meetings

• Meeting titles, schedules, and participant information.
• Transcripts, notes, or recordings where supported and authorized.
• Meeting summaries, decisions, and follow-up actions.

Other business applications

• Records, tasks, and information from supported business systems.
• Information required to complete a user-requested operation.

WorkForge does not necessarily access all these categories for every user. Access depends on the particular integration, the permissions granted, and the features enabled.

4.3 Prompts and User-Provided Content

We may process information you submit to WorkForge, including:

• Questions, prompts, and instructions.
• Documents, files, notes, and attachments.
• Text or messages entered into the application.
• Information provided through supported dictation features.
• Preferences and contextual information you provide to complete tasks.

This information may be processed to understand your instructions, retrieve relevant information, generate responses, and perform authorized operations.

4.4 Information Generated by WorkForge

WorkForge may generate information such as:

• Responses, drafts, recommendations, and summaries.
• Meeting notes and follow-up items.
• Task plans, status information, and execution results.
• Information extracted from connected applications.
• Context or preferences used to support continuity, where available.

Whether these outputs are saved depends on the destination, feature, and configuration involved.

4.5 Technical and Usage Information

When you visit our website or use WorkForge, we may process limited technical information needed to operate and secure the Services, such as:

• IP address and approximate location derived from it.
• Browser, operating system, and device information.
• Application version and connection status.
• Access times and relevant usage events.
• Performance metrics, errors, and diagnostic information.
• Authentication events and security logs.

The actual information collected depends on the technologies and configurations in use.

4.6 Support and Communications

If you contact us, we may process your name, email address, messages, feedback, and information you choose to include in your inquiry.

We use this information to respond to you, investigate issues, provide support, and maintain appropriate records of our communications.

4.7 Information About Other People

WorkForge may process information about people other than the account holder. For example, an email may contain information about its sender, a calendar event may identify attendees, or a meeting transcript may include statements made by participants.

You are responsible for ensuring that you have the necessary rights, permissions, notices, and consents to provide or authorize access to such information.

5. How We Use Information

We use relevant information for the following purposes.

5.1 Providing WorkForge

We process information to:

• Create and administer accounts.
• Connect authorized applications.
• Interpret user instructions.
• Retrieve information needed to answer questions.
• Generate drafts, summaries, recommendations, and other outputs.
• Support email, calendar, document, and meeting-related tasks.
• Prepare meeting summaries and follow-up actions through ForgeMeet.
• Complete supported tasks through ForgeClaw and other enabled features.
• Provide personalization and continuity where supported.

5.2 Performing User-Requested Actions

Depending on the feature and permissions, WorkForge may prepare or carry out tasks through connected applications.

These tasks may include preparing communications, organizing information, scheduling events, or updating records.

WorkForge is designed so that actions which send, accept, book, or otherwise commit on your behalf are prepared for your review and completed only after you approve them. If you or your organization choose to set up standing permissions for specific, routine tasks, WorkForge will act only within the scope of those permissions. The available controls depend on the feature and the connected application.

You should review permissions and task instructions carefully, particularly when an action could affect another person, change a business record, or create an external commitment.

5.3 Security and Reliability

We may process technical information to authenticate users, protect accounts, detect suspicious activity, diagnose errors, maintain availability, prevent abuse, and enforce our agreements.

5.4 Customer Support

We use support-related information to answer questions, troubleshoot problems, investigate reported issues, and communicate important service updates.

5.5 Legal and Compliance Purposes

We may process information when reasonably necessary to comply with legal obligations, respond to valid legal requests, establish or defend legal claims, or protect the rights and safety of ConForge, our users, and others.

We do not assume that information accessible through a connected application may be used for unrelated purposes simply because the connection makes it available.

5.6 No Use of Your Content to Train AI Models

We do not use your business content, prompts, files, meeting information, or the outputs generated for you to train artificial intelligence models, whether ours or anyone else's. Where WorkForge relies on third-party AI model providers to deliver its features, we work with those providers under terms and settings intended to ensure that your content is not used to train their models.

6. AI Assistant and AI Services

WorkForge includes an AI assistant that processes your requests to generate responses and help with tasks, including writing meeting notes.

When you use the AI assistant, WorkForge sends the messages you type and the relevant work information it retrieves to OpenRouter, Inc. OpenRouter passes this information to an AI model provider, such as Anthropic, OpenAI, or Google, to generate a response.

This information is used to respond to your requests and generate meeting notes. OpenRouter and the relevant AI model providers process this information under zero-data-retention arrangements, meaning they do not retain it after generating a response or use it to train AI models.

In the WorkForge phone app, information is not sent to these AI services until you grant permission on the Assistant screen. You can withdraw that permission at any time under Account > Privacy & Data > AI Assistant.

Dictation and transcription performed on your phone run on the device and are not sent to an AI service.

7. AI-Generated Responses

The AI assistant may generate responses, summaries, meeting notes, action items, drafts, and other content based on your requests and the work information available to it.

AI-generated content may contain errors, omit important context, or be incomplete. You are responsible for reviewing the content before relying on it, sharing it, or using it to make decisions.

You should verify important information and review generated communications before sending them. WorkForge assists with your work but does not replace your judgment or responsibility for the actions you take.

You are responsible for ensuring that you have the necessary rights and permissions to submit information to the AI assistant and use the resulting content.

8. Data Storage and Processing

8.1 Our Approach to Storage

WorkForge is designed to operate with your existing applications and systems. ConForge does not intentionally maintain a separate content repository for the business information you connect to or submit through WorkForge.

This means WorkForge is designed to access and process relevant information to perform requested tasks without requiring you to move all your business content into a separate ConForge-controlled storage system. Your business content remains in the systems that you and your organization control, such as your connected email, calendar, document, and meeting applications. ConForge retains only the limited operational information described in Section 8.4, which is needed to run and protect the Services.

This statement concerns the storage of user content. It does not mean that no information is ever processed, transmitted, or temporarily held while a service operates.

8.2 Temporary Processing

To provide WorkForge functionality, information may need to be retrieved, transmitted, or temporarily processed.

For example, a request may require retrieving a relevant email, processing meeting information, or returning a generated response through the WorkForge interface.

Temporary processing is distinct from maintaining a permanent content repository. The systems involved may handle limited information as technically necessary to complete the requested operation.

8.3 Information in Your Existing Systems

Information in connected email accounts, calendars, document platforms, meeting services, or other applications remains subject to the storage and retention practices of those systems.

WorkForge may create or update information in those systems when you authorize an action. Such information may remain there according to your settings and the policies of the relevant service.

ConForge does not control the independent retention or deletion practices of those third-party services.

8.4 Operational Information

We may process limited account, authentication, technical, diagnostic, and security information as reasonably necessary to operate, maintain, and protect WorkForge.

This operational information is distinct from the business content you access through connected applications.

The exact information handled depends on the configuration and technical requirements of the Services.

9. Connected Applications and Permissions

WorkForge may connect to third-party applications to provide its features.

When you authorize a connection, you grant the permissions presented by the relevant integration. WorkForge uses those permissions to provide the functionality you enable.

You should review the requested permissions before connecting an account and periodically review your active connections.

You may be able to revoke access through WorkForge settings, the connected application, or your organization's administrative controls.

Revoking access generally prevents future access through that authorization. It does not necessarily delete information already present in the connected application, information previously saved by you or your organization, or records maintained independently by a third party.

Third-party applications remain subject to their own privacy policies, terms, security practices, and availability.

10. Desktop, Mobile, Browser, and Messaging Features

WorkForge may provide functionality through supported desktop applications, mobile applications, web interfaces, and messaging platforms.

10.1 Desktop and Dictation Features

If you use dictation or similar features, spoken or entered information may be processed to convert it into text, interpret your instructions, or complete a requested task. Where supported, WorkForge is designed to convert speech to text locally on your device rather than sending your audio elsewhere for transcription.

The information processed depends on the feature and permissions enabled. You should review the relevant device permissions and the terms of any independent service involved.

10.2 Mobile Features

Mobile features may display task information, summaries, notifications, and approval requests.

Depending on your device and settings, notifications may display information on your lock screen or other shared surfaces. You can manage notification and device permissions through the applicable settings.

10.3 Browser Features

When using WorkForge through a browser, information may be processed to display your workspace, maintain a session, retrieve relevant information, and support enabled features.

Browser storage, session identifiers, or similar technologies may be used where necessary for functionality and security.

10.4 Messaging Integrations

If you use WorkForge through Microsoft Teams or another supported messaging platform, that platform may independently process messages, account information, and interaction metadata under its own policies.

Information shared through a messaging platform may be visible to other users according to that platform's permissions and your organization's settings.

11. Meeting Information and ForgeMeet

ForgeMeet supports meeting-related work, including meeting notes, summaries, decisions, and follow-up actions.

Depending on the feature and configuration, ForgeMeet may process meeting titles, schedules, participant information, transcripts, recordings, notes, and other meeting-related material.

We do not assume that every meeting feature records or transcribes every meeting. Processing depends on the feature enabled and the information made available to it.

ForgeMeet records only when you choose to start a recording. Where supported, speech is converted to text on your device, and recordings are stored in encrypted form so that they are accessible to the user who made them, subject to your device settings and any controls established by your organization.

You are responsible for ensuring that you have the necessary rights, permissions, and consents to record, transcribe, upload, or otherwise process meeting information, including information about other participants.

You must comply with applicable recording laws, workplace policies, contractual confidentiality obligations, and organizational requirements.

Generated summaries and action items may omit context or misinterpret statements. Review important outputs before relying on or distributing them.

12. Disclosure of Information

We do not sell personal information for monetary consideration.

Information may be disclosed or transmitted in the following circumstances, subject to applicable law.

12.1 Connected Applications

When you ask WorkForge to perform an operation through a connected service, relevant information may be transmitted to that service as necessary to carry out your instruction.

12.2 Service Providers

We may use service providers for website hosting, authentication, security, diagnostics, communications, technical support, and other operational functions.

These providers may process limited information on our behalf under applicable contractual terms and safeguards.

12.3 Your Organization

If you use WorkForge through an employer or organization, authorized administrators or other users may be able to access information according to the organization's configuration, permissions, and applicable agreements.

12.4 Legal Requirements and Protection

We may disclose information when required by applicable law or valid legal process, or when reasonably necessary to investigate suspected abuse, protect safety, enforce agreements, or establish or defend legal claims.

Where legally permitted, we will assess requests appropriately and disclose only what we reasonably determine is necessary.

12.5 Business Transactions

Information may be disclosed as part of a merger, acquisition, financing, restructuring, or sale of assets, subject to applicable legal requirements and appropriate safeguards.

12.6 With Your Direction or Consent

We may disclose information when you direct us to do so, authorize an operation, or provide consent where required.

We do not share business content for unrelated advertising purposes merely because it is accessible through WorkForge.

13. Data Retention and Deletion

13.1 User Content

WorkForge is designed not to maintain a separate, permanent content repository under ConForge's control for the business content you connect to or submit through the Services.

Information may nevertheless be processed temporarily to complete a task. It may also be saved in your connected applications, your organization's systems, or another destination you choose.

The storage and retention of information in those destinations are governed by the relevant systems, settings, and applicable agreements.

13.2 Operational Information

Limited account, authentication, technical, diagnostic, security, and support information may be retained where reasonably necessary to operate and protect the Services, respond to inquiries, resolve disputes, and comply with legal obligations.

We intend to retain such information only for as long as reasonably necessary for those purposes, subject to applicable law.

We do not currently specify a fixed retention period for every category of operational information in this Policy. Actual retention periods depend on the type of information, the system involved, and applicable legal or security requirements.

13.3 Disconnecting Applications

Disconnecting an application generally prevents future access through the revoked authorization.

Disconnecting does not delete information already stored in the connected application or in systems controlled independently by you, your organization, or the third-party provider.

13.4 Deleting Information

If you want information removed from a connected application, you may need to delete it through that application or ask its provider or administrator to do so.

If you believe ConForge retains personal information about you, you may submit a deletion request to admin@conforgeai.com.

We will assess the request and take appropriate action for information within our control, subject to applicable law and legitimate retention requirements.

Information may remain in backups, security records, or other systems for a limited period where necessary and lawful. We will not represent that information has been immediately erased from systems we do not control.

13.5 Closing an Account

If WorkForge provides account-deletion functionality, you should follow the instructions provided within the product. You may also contact us to request assistance.

Closing an account does not necessarily delete information retained by connected applications, your organization, or other independent services.

We may retain limited information where required by law or reasonably necessary to address security incidents, resolve disputes, or enforce our agreements.

14. Security

We use reasonable technical, organizational, and administrative measures designed to protect personal information against unauthorized access, loss, misuse, alteration, and disclosure.

Depending on the service and configuration, safeguards may include access restrictions, authentication mechanisms, monitoring, secure development practices, and assessments of relevant service providers.

The security of information also depends on the configuration of connected applications, user devices, organizational systems, and third-party services.

No system or transmission method can be guaranteed to be completely secure. We cannot promise that security incidents will never occur.

You should protect your account credentials, secure your devices, review application permissions, and notify us if you suspect unauthorized access.

Where required by applicable law, we will notify affected individuals and relevant authorities of qualifying personal data breaches.

15. Cookies and Website Analytics

Our website may use cookies and similar technologies to provide essential functionality, maintain sessions, understand website performance, and protect against abuse.

Depending on the technologies implemented, these tools may collect information such as browser details, device information, IP addresses, pages viewed, and interaction data.

Where required by law, we will obtain consent before using non-essential cookies or similar technologies.

You may be able to manage cookies through website settings or your browser. Disabling essential cookies may affect website functionality.

The actual cookies, analytics providers, and retention periods depend on the technologies deployed on the website.

16. Your Privacy Rights

Depending on your location and applicable law, you may have rights concerning your personal information, including the right to:

• Request access to personal information we hold about you.
• Request correction of inaccurate personal information.
• Request deletion of personal information.
• Request a portable copy of certain information.
• Object to or request restriction of certain processing.
• Withdraw consent where processing is based on consent.
• Opt out of certain marketing communications.
• Exercise applicable rights concerning automated decision-making.
• Lodge a complaint with a competent privacy regulator.

These rights are subject to applicable legal requirements and exceptions.

How to Submit a Request

Contact admin@conforgeai.com with the subject line “Privacy Request.”

Please identify the request you wish to make and provide enough information for us to understand and verify it. We may request additional information to verify your identity or authority.

We will respond within the time required by applicable law. Where a request cannot be fulfilled, we will explain the reason and any available appeal rights where required.

Product and Organizational Controls

You may be able to manage connected applications, account settings, and stored information through WorkForge or your organization's systems.

Where your employer or organization controls the relevant information, we may need to direct your request to that organization or coordinate with it to respond.

17. Additional Information for U.S. Residents

Certain U.S. state privacy laws provide additional rights concerning personal information.

Depending on the applicable law, these rights may include the right to know what information is collected, access or correct information, request deletion, obtain a portable copy, opt out of certain sales or targeted advertising, and appeal certain privacy decisions.

ConForge does not sell personal information for monetary consideration. If our activities fall within a legal definition of sale, sharing, targeted advertising, or another regulated activity, we will provide the notices and choices required by applicable law.

Where required, we will honor recognized opt-out preference signals.

To exercise applicable rights, contact admin@conforgeai.com.

18. Additional Information for European and UK Residents

Where the GDPR, UK GDPR, or applicable related legislation applies, we process personal information on an appropriate legal basis.

Depending on the circumstances, these bases may include:

• Contractual necessity: To provide WorkForge or take steps at your request before entering into a contract.
• Legitimate interests: To operate, secure, and improve the Services where those interests are not overridden by your rights.
• Consent: Where you have consented to a specific processing activity.
• Legal obligations: To comply with applicable law.

Where required, you may have rights to access, rectify, erase, restrict, or object to processing; request data portability; withdraw consent; and complain to a data protection authority.

Where personal information is transferred outside the European Economic Area or the United Kingdom, we will implement appropriate transfer safeguards where required by law.

Where required, we will publish the details of any designated European or UK representative.

19. Additional Information for India Residents

Where India's Digital Personal Data Protection Act, 2023, applicable rules, and other relevant laws apply to our processing, we will comply with the requirements applicable to our activities.

Subject to applicable law, individuals may have rights concerning access to information about processing, correction and erasure, grievance redressal, and nomination of another person in specified circumstances.

For privacy inquiries or grievances, contact admin@conforgeai.com.

We will provide any additional notices, consent mechanisms, or grievance contact details required by the laws applicable to our Services.

20. International Data Transfers

ConForge is based in the United States. Depending on the Services, connected applications, and supporting infrastructure, limited information may be processed in countries other than your country of residence.

Those countries may have privacy laws that differ from those in your jurisdiction.

Where required by applicable law, we will implement appropriate contractual, technical, or other safeguards for international transfers.

Your organization may also establish requirements governing where its information may be stored or processed. Such requirements should be addressed through the applicable deployment configuration and contractual arrangements.

21. Children's Privacy

WorkForge is designed for professional productivity and is not directed to children under 13.

We do not knowingly collect personal information directly from children under 13 in violation of applicable law.

Where applicable law establishes a higher minimum age or additional requirements for minors, we will comply with those requirements.

If you believe a child has provided personal information to us inappropriately, contact admin@conforgeai.com.

22. Organizational and Enterprise Use

When WorkForge is provided through an employer or another organization, that organization may administer accounts, establish access permissions, configure integrations, and determine which features are available.

Authorized administrators may be able to access information associated with organizational accounts, depending on the product configuration and applicable agreement.

The organization may act as the controller or business for information processed through its deployment, while ConForge may act as its processor or service provider.

Where required, our relationship with the organization will be governed by a separate agreement or Data Processing Agreement.

If you use WorkForge through an organization, consult its internal privacy policies and administrator for information about its configuration and access practices.

23. Third-Party Services

WorkForge may integrate with or link to third-party applications, websites, and services.

Those services are independently operated and may collect or process information under their own privacy policies, contractual terms, and settings.

ConForge does not control the independent practices of third-party services and cannot guarantee their availability, security, or data-handling practices.

You should review the relevant terms and permissions before connecting a service.

24. Changes to This Privacy Policy

We may update this Policy to reflect changes in WorkForge, our technical architecture, our data practices, or applicable legal requirements.

When we make changes, we will update the “Last updated” date and publish the revised Policy.

Where required by law, we will provide additional notice or obtain consent before implementing material changes.

We will not treat publication of an updated Policy as a substitute for consent where applicable law requires separate consent.

25. Contact Us

For questions about this Privacy Policy, our data practices, or your privacy rights, contact:

ConForge AI LLC
Louisiana, United States

Website: conforge.si/workforge
Privacy inquiries: admin@conforgeai.com
Security inquiries: tech@conforgeai.com

Please do not include passwords, authentication codes, or unnecessary sensitive information in your privacy inquiry.

End of Privacy Policy