Note: ChatClean is currently in limited beta. The Services described here may change as the product evolves; material changes will be reflected by the “Last updated” date above.
This Privacy Notice explains how ForgeCraft, Inc. (“ChatClean”, “we”, “us”) collects, uses, and protects personal data in connection with the ChatClean website (chat-clean.com) and our data-cleaning services.
ChatClean’s services are currently offered only to customers in the United States.
1. Two roles we play
Website and intake data — we are the controller. We decide how the contact information you give us is handled.
Client project data — we act as a service provider. When you send us a support-data export to clean, that export may contain personal data about your customers and staff. For that data, you are responsible for it under applicable law, and we process it only on your instructions and under our agreement (and a Data Processing Addendum, where signed).
2. Information we collect
- Project and contact data: your name, work email, company, support stack, rough record volume, timeline, output-format preferences, desired-output samples, and anything you tell us through the ChatClean project workspace or by email.
- Project data: the contents of the export you send us, which may include names, email addresses, phone numbers, account identifiers, and free text containing personal data. We ask you not to send special-category data, full payment-card numbers, government IDs, protected health information, or data subject to HIPAA, FERPA, or GLBA unless agreed in writing in advance.
- Payment data: handled by Stripe. We receive confirmation and limited billing details, not your full card number.
- Technical and product-usage data: basic server logs, product analytics, approximate attribution data such as referrers and UTM parameters, clicked buttons, viewed pages, and masked session replays that help us understand where the product is confusing. We do not send uploaded project files, file contents, filenames, desired-output samples, or support records to analytics tools.
3. How we use information
We use intake and contact data to respond to your requests, scope and deliver projects, send your deliverable, take payment, keep business records, and comply with law.
We use project data only to perform the cleaning service you engaged us to perform, and for no other purpose.
4. How we handle project data
We never need your raw customer data to get started. A mutual NDA is available on request. Files are transferred over encrypted channels and processed using AI models we operate ourselves — either local models or enterprise-tier cloud models running in cloud accounts we control with zero-retention configurations. We do not send your data to consumer AI services such as ChatGPT, Claude.ai, or Gemini. Source files are deleted within 7 days of delivery unless you instruct otherwise in writing. A Data Processing Addendum (DPA) describing this processing is available on request.
5. Sharing and sub-processors
We do not sell or share personal data for cross-context behavioral advertising. We share data only with service providers that help us operate: Stripe (payments), Vercel (website hosting), and PostHog (product analytics and masked session replay). Your project export is not shared with these providers. Any AI models used to process your export run on infrastructure we control under zero-retention terms (see section 4), not on consumer AI services. We may disclose data where required by law.
6. Data retention
- Project and contact data: kept while we are in contact and for a reasonable period afterward for records and legal needs.
- Project source files: deleted within 7 days of delivery.
- Deliverables: retained only as agreed with you.
- Payment records: kept as long as the law requires.
7. Security
We use encryption in transit, access controls, processing on infrastructure we control, and NDAs. No method of transmission or storage is 100% secure, but we take measures appropriate to the sensitivity of the data.
8. California residents
If you are a California resident, the California Consumer Privacy Act (“CCPA”/“CPRA”) gives you certain rights regarding your personal information, including the right to:
- Know what categories of personal information we have collected about you, the sources, the purposes, and the categories of third parties with whom we share it
- Access the specific pieces of personal information we hold about you
- Delete personal information we have collected about you, subject to certain exceptions
- Correct inaccurate personal information
- Opt out of “sale” or “sharing” of your personal information — we do not sell personal information and do not share it for cross-context behavioral advertising
- Limit the use of sensitive personal information — we do not use sensitive personal information for purposes that trigger this right
- Non-discrimination for exercising your rights
To exercise these rights, email us at legal@chat-clean.com from the address associated with your request. We may need to verify your identity before responding. You can also designate an authorized agent to make a request on your behalf, subject to verification.
For project data (your company’s customers, employees, or end users), please direct rights requests to the business that engaged us — they are responsible for that data, and we will assist them as their service provider.
9. Cookies
The site uses essential cookies for authentication and project flow, and product analytics cookies from PostHog to understand usage and improve the service. Session replay is configured to mask inputs and customer data surfaces. Stripe may set its own cookies on its domain when you interact with checkout.
10. Children’s privacy
The Services are for businesses and are not directed to children under 13. We do not knowingly collect their personal data.
11. Changes to this notice
We may update this Privacy Notice; material changes will be reflected by the “Last updated” date above.
12. Contact
ForgeCraft, Inc. — legal@chat-clean.com
If you require a mailing address for formal legal notices, please request it by email.