Privacybeleid
Last updated: October 5, 2026
Data controller
FORGE LABS, reachable at contact@forge-labs.fr, processes the data needed to operate SocialForge. Privacy requests can be sent to contact@forge-labs.fr.
Data and purposes
We process account, workspace and billing data, scheduled content, social account identifiers, technical logs and contact requests to provide and secure the service, publish requested content, bill subscriptions and answer enquiries.
Meta and Pinterest tokens are encrypted at rest. Passwords are hashed and never stored in plain text.
Pinterest connection
Accounts connect through OAuth on Pinterest. SocialForge receives the professional account username and type, public boards, Pins and their identifiers, and access and refresh tokens. SocialForge never asks for the Pinterest password.
This data is used to select boards, publish approved images and copy, verify publications and collect impressions, saves and outbound clicks. The connector does not access Geniosteo patient data, Pinterest private messages, advertising or payment data. Campaign parameters in destination links do not identify individual readers.
Pinterest access and disconnection
Only authorized workspace and brand users can access the data. Tokens are encrypted in the server database and excluded from content exports. Data is not sold or used to train AI models.
The Disconnect button in Social accounts removes the tokens held by SocialForge and stops account publications. Authorization can also be revoked in Pinterest settings. Publication content and identifiers remain in history to prevent duplicates; analytics remain available during campaign monitoring. Deletion can be requested using the contact on this page. Disconnection does not delete Pins already published on Pinterest.
Pinterest processes published content and API traffic under its privacy policy at https://policy.pinterest.com/privacy-policy.
Legal bases
Account, publishing and billing operations are necessary to perform the contract. Security, abuse prevention and service improvement rely on legitimate interests. Optional communications rely on consent.
Recipients and processors
Authorized staff and, depending on the features used, hosting, object storage, email and payment providers and connected Meta or Pinterest platforms may process data. Stripe processes payment information under its own terms; SocialForge does not store full card numbers.
Retention and security
Account data is kept for the contractual relationship and applicable statutory periods. Technical logs and contact requests are retained only as long as reasonably needed for security and follow-up. Backups may remain until their rotation period ends.
Your rights
You may request access, correction, erasure, restriction, portability or object to eligible processing by contacting contact@forge-labs.fr. You may also complain to your competent supervisory authority.
Transfers and updates
Some providers may process data outside the EEA under the required safeguards. This policy may be updated; the date shown on this page is authoritative.