Privacy Policy
Last updated: June 26, 2026
TKO Cloud Solutions ("we", "us") operates TKO Forge (the "Service"). This Policy explains what we collect, how we use it, and your rights.
Roles. For your account and how you use the Service, we are the data controller. For the Customer Data you upload and the communications you send (e.g., your contacts and recipients), you are the controller and we act as your processor, handling that data on your instructions to provide the Service.
1. Information we collect
- Account data: name, email, password (hashed by our auth provider), title, profile photo, workspace and role.
- Customer Data: the CRM and communications data you submit (contacts, companies, deals, activities, email/SMS content and engagement).
- Usage & device data: log data, IP address, browser/device info, and product analytics.
- Payment data: processed by our payment provider; we do not store full card numbers.
- Communications metadata: email open/click events and delivery results for messages sent through the Service.
2. How we use information
To provide, secure, maintain, and improve the Service; authenticate users; process payments; send service and (with permission) marketing communications; provide support; prevent fraud and abuse; and comply with law.
3. Legal bases (where GDPR applies)
Performance of a contract; legitimate interests (securing and improving the Service); consent (where required, e.g., certain marketing); and legal obligations.
4. How we share information
We do not sell your personal information. We share with service providers ("subprocessors") who process data on our behalf under contract:
- Google Firebase / Google Cloud (hosting, database, authentication, storage)
- Stripe (payment processing)
- Resend (transactional & marketing email delivery)
- Twilio (SMS delivery)
- Anthropic (AI features)
We may also share to comply with law, enforce our terms, protect rights and safety, or in connection with a merger or acquisition.
5. International transfers
Data may be processed in the United States and other countries. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers.
6. Retention
We retain personal data for as long as your account is active and as needed to provide the Service, comply with law, resolve disputes, and enforce agreements. We delete or anonymize data after a reasonable period following account closure.
7. Security
We use technical and organizational measures including encryption in transit and at rest, least-privilege access controls, optional two-factor authentication, and audit logging. No method is 100% secure, but we work to protect your data and limit the impact of any incident.
8. Your rights
Depending on your location, you may have rights to access, correct, export, delete, or restrict processing of your personal data, and to object or withdraw consent. You can export your data and delete your account from Profile → Your data & privacy in the app, or contact privacy@tkoforge.com. We will respond as required by law. You may also have the right to lodge a complaint with a supervisory authority.
9. Cookies
We use necessary cookies for authentication and security, and limited analytics. You can control cookies through your browser; some features may not work without them. See our Cookie & Tracking Notice at tkoforge.com/cookies for details.
9a. Business customers (Data Processing Addendum)
If you use the Service as a business to process the personal data of others (e.g., your contacts and message recipients), our Data Processing Addendum at tkoforge.com/dpa governs that processing and is incorporated into the Agreement.
10. Children
The Service is not directed to children under 16, and we do not knowingly collect their data.
11. Changes
We may update this Policy and will post changes here with a new "Last updated" date.
12. Contact
Privacy questions or requests: privacy@tkoforge.com · TKO Cloud Solutions · tkoforge.com.
© 2026 TKO Cloud Solutions. All rights reserved.