ClaimForge Launch V1 · Effective upon public launch

Privacy Policy

ClaimForge Launch V1. Approved September 11, 2026. Effective upon public launch.

Scope and contact

SkyPower LLC d/b/a ClaimForge operates ClaimForge. This notice covers the storefront, subscriber accounts, and Observatory. Contact info@claimforgegeo.com for privacy questions. Customer-facing location: Reno, Nevada.

Information we handle

• Account identity: durable account identifier, email/login address and lookup hash, password hash (Argon2id), verification/account state, and relevant timestamps. We do not store plaintext passwords.
• Account security: hashed opaque session and verification/recovery tokens, expiration and revocation/consumption metadata, and account/security audit events.
• Subscription and access: Stripe customer, subscription, and Checkout correlation identifiers; billing and access status; paid-through dates; and billing/security/audit history. Edition requests and access history may be processed where operationally required.
• Technical operation: application request method and URL path. Application logging excludes request bodies, cookies, and query values. Hosting, payment, and email providers also process technical information needed to deliver and secure their services.
• Correspondence: information you choose to send for account, billing, privacy, legal, or research-correction support.

ClaimForge identity registration does not request a personal billing address, phone number, employer, or date of birth. Vault prospect data is not part of subscriber identity collection. ClaimForge does not store full payment-card details or CVCs; Stripe handles payment information directly. Stripe may collect billing/contact details and permits profile updates and cancellation feedback through its Portal.

Public records used in the intelligence product are separate from subscriber identity information. BLM/MLRS is a research source, not a subscriber-data processor.

How information is used

We use information to create and verify accounts, authenticate subscribers, recover access, secure the service, correlate verified billing status with access, respond to inquiries, and maintain necessary operational, legal, security, and accounting records. Verification and recovery emails are transactional; account creation is not consent to marketing email.

Service providers and disclosures

Stripe processes payments, subscriptions, and Customer Portal activity. We exchange correlation identifiers and billing/subscription status needed to operate access; Stripe also handles information supplied directly on its hosted pages. Stripe's privacy information explains its practices.

Render hosts the application and associated databases. Resend delivers verification and password-recovery email using the recipient address, transactional message, and one-time link. We do not send passwords to Resend. Access by providers is limited to information needed for their functions, subject to their service arrangements. Provider processing and storage locations may differ from your location.

We may disclose information when reasonably necessary to comply with law, respond to valid legal process, protect rights or security, or carry out a business transfer with appropriate protections and any required notice. We do not sell subscriber personal information or share it for cross-context behavioral advertising in the launch architecture.

Cookies and tracking

The ClaimForge storefront and Observatory contain no advertising, behavioral-targeting, or analytics tracking scripts in the reviewed launch implementation. A necessary authentication cookie maintains signed-in access. In the hosted configuration it is Secure, HttpOnly, SameSite=Strict, and expires after 12 hours. Account sign-out revokes the session; a successful password reset revokes existing sessions.

Stripe-hosted Checkout and Portal pages and external linked sites have their own cookie and privacy practices. Essential hosting/security processing is separate from advertising tracking. We do not introduce optional tracking through these legal pages.

Retention and security

We retain account identity while the account is active and thereafter only as reasonably necessary for legal, security, or accounting purposes. Security/audit and billing records may need to be retained longer than transient authentication material to investigate incidents, resolve disputes, reconcile payments, or meet legal obligations. Support correspondence is retained for the request and any reasonably necessary follow-up or recordkeeping.

Verification/recovery tokens have short validity periods and sessions have bounded validity. Expiration or revocation makes credentials unusable; it does not itself erase their stored records. Retention review prioritizes expired or consumed token records and expired or revoked sessions for removal once they are no longer needed for security or troubleshooting. The current system does not promise automatic deletion on expiration or a fixed erasure deadline. Backups and legally required records may persist beyond removal from active systems until their applicable retention need ends.

We use password/token hashing and restricted access to protect information. No system can guarantee absolute security. We minimize retained information according to its purpose and review continuing need rather than treating all categories as permanent records.

Your requests

Contact info@claimforgegeo.com to request access, correction, or deletion of your personal information. Depending on applicable law, you may also have rights to portability, restriction, objection, appeal, or complaint to an appropriate regulator. We will assess and respond to requests under applicable law and may need to verify identity. Legal, security, accounting, or other lawful exceptions may limit deletion or access. We do not treat a privacy request as permission to disclose another person's information.

Cancellation and account deletion are separate actions. Use Account → Manage Subscription to stop renewal through Stripe, or contact us if you cannot access it. Do not email passwords or full payment-card details. ClaimForge is intended for professional adult use, not for children.

Changes

The published notice will identify its effective date. We will communicate material changes through the service or account email where appropriate or required by law. Questions about this notice may be sent to info@claimforgegeo.com.