Privacy Policy

Forge ERP (“Forge ERP,” “we,” “us”) operates the Gantry platform (the “Service”), a manufacturing and business-operations application for trailer and industrial manufacturers. This Privacy Policy explains what information we handle, how we use it, and the choices available to you. It applies to the Gantry Service, including any integration with QuickBooks Online.

We handle the following categories of information on behalf of the businesses that use the Service:

• Account information — names, email addresses, and roles of the staff members a business invites to use the Service.
• Business operations data — quotes, sales orders, invoices, inventory, purchase orders, production records, and personnel time and pay records that a business enters into the Service.
• QuickBooks Online data — when a business connects its QuickBooks Online account, we access and exchange the accounting data needed to sync invoices and customers, such as customer records, invoice and item details, and the company identifier (realm ID). We access only what is required to provide the connected features.
• Technical data — limited log and error information (for example, timestamps and error messages) used to keep the Service secure and reliable.

The Service is a tool for businesses. We do not use it to knowingly collect information from children, and it is not directed to individuals under 18.

• To provide, operate, and maintain the Service and its features.
• To create and synchronize invoices and customer records between the Service and a connected QuickBooks Online account, at the direction of the business.
• To authenticate users and enforce role-based access within a business’s account.
• To secure the Service, diagnose problems, and prevent misuse.
• To comply with legal obligations.

We do not sell personal information, and we do not use QuickBooks data for advertising or to build marketing profiles.

When a business connects QuickBooks Online, the resulting access and refresh tokens are encrypted at rest using industry-standard authenticated encryption (AES-256-GCM) and are accessible only to secured server-side processes — never to browsers or other tenants. Access to accounting data is scoped to the connecting business, and connections can be revoked at any time from within the Service.

We use a small number of trusted providers to run the Service. They process data only to provide their services to us:

• Supabase — database, authentication, and file storage.
• Vercel — application hosting and delivery.
• Intuit / QuickBooks Online — the accounting platform a business chooses to connect.
• Stripe — subscription billing (payment details are handled by Stripe, not stored by us).
• Sentry — error monitoring.

We do not otherwise sell, rent, or share your data with third parties, except where required by law.

We retain business data for as long as an account is active or as needed to provide the Service. A business may disconnect its QuickBooks Online account at any time, which removes the stored connection and tokens. To request deletion of an account and its associated data, contact us at the address below; we will delete or de-identify the data unless we are required to retain it for legal or legitimate business reasons.

Businesses control the data they enter and can update or remove it through the Service. Depending on your jurisdiction, you may have rights to access, correct, or delete personal information, or to object to certain processing. To exercise these rights, contact us using the details below. Because the Service is provided to businesses, we may direct certain requests to the business that controls the relevant account.

We use only the cookies necessary to keep you signed in and to operate the Service. We do not use advertising or cross-site tracking cookies.

We may update this Privacy Policy from time to time. When we do, we will revise the effective date above and, where appropriate, provide additional notice. Continued use of the Service after an update constitutes acceptance of the revised policy.

Questions about this Privacy Policy or our data practices can be sent to forgeerpsystem@gmail.com.