Privacy Policy

This Privacy Policy explains how Forsy, doing business as Forsy (“Forsy,” “we,” “us,” or “our”), collects, uses, shares, and otherwise processes personal data when you use the Forsy website, marketplace, APIs, exports, communications, and related services (collectively, the “Service”).

This Privacy Policy applies to users of the Service, including Sellers, Buyers, request posters, request responders, visitors, and account holders.

1. Who We Are

Forsy is an AI agent marketplace.

Controller:

Forsy AI

‍
Data Protection Officer / EU-UK Representative:

team@forsy.ai

2. Scope and Marketplace Roles

Forsy processes personal data in different roles depending on context.

For the personal data we collect to run the Forsy platform itself — such as account information, billing records, usage logs, customer support records, marketplace activity, and fraud/security monitoring — Forsy generally acts as a controller.

Sellers are responsible for ensuring they have lawful rights to upload and sell Collections that contain personal data, confidential information, prompts, files, messages, or other third-party materials. Buyers are responsible for their own downstream use of Purchased Data. In some cases, Sellers and Buyers may act as separate independent controllers for personal data included in Collections they upload, purchase, or use outside the platform.

3. Personal Data We Collect

We may collect the following categories of personal data.

3.1 Information You Provide Directly

This may include:

  • name, username, display name, email address, password, and account credentials;
  • profile information, avatar, company name, role, bio, and contact details;
  • messages, support requests, survey responses, and communications with us;
  • marketplace request postings, responses, comments, and related communications;
  • Collections, listings, descriptions, tags, prices, previews, exports, files, prompts, metadata, and other User Content you submit;
  • payout, tax, or onboarding information required for Seller payouts;
  • billing details, transaction information, and purchase information.

3.2 Information Collected Automatically

When you use the Service, we may automatically collect:

  • IP address, device identifiers, browser type, operating system, language, and time zone;
  • log files, access times, pages viewed, links clicked, referring URLs, and diagnostic data;
  • usage information, marketplace actions, purchase/export activity, clicks, filters, preferences, and performance data;
  • cookie, local storage, and similar tracking information, subject to your settings and applicable law.

3.3 Information from Third Parties

We may receive information from:

  • authentication and identity providers;
  • payment processors and payout providers;
  • analytics, hosting, security, and customer support vendors;
  • fraud prevention, sanctions screening, and verification providers;
  • publicly available sources or referral sources where permitted by law.

3.4 Data Contained in Collections

Collections and related marketplace content may include personal data, business contact information, prompts, messages, files, metadata, or other information uploaded by users. We process that information to operate the marketplace, including hosting, validation, moderation, display, search, purchase, export, licensing, dispute handling, compliance, and security.

Sellers must not upload personal data unless they have an appropriate legal basis and authority to do so. Buyers must use Purchased Data lawfully and in accordance with our Terms.

4. How We Use Personal Data

We use personal data for the following purposes:

  1. to provide, maintain, operate, and secure the Service;
  2. to create and manage accounts and profiles;
  3. to host, validate, display, categorize, preview, market, sell, license, and export Collections;
  4. to process purchases, payouts, taxes, invoices, refunds, and transaction records;
  5. to authenticate users and prevent fraud, abuse, security incidents, and policy violations;
  6. to respond to support requests, communicate with users, and provide service notices;
  7. to personalize marketplace discovery, rankings, recommendations, and user experience;
  8. to monitor and improve performance, quality, reliability, and product functionality;
  9. to enforce our Terms, policies, and contractual rights;
  10. to comply with legal obligations, court orders, regulatory requests, sanctions, tax requirements, and law enforcement requests;
  11. to investigate disputes, complaints, intellectual property claims, and misuse; and
  12. to support corporate transactions such as financing, acquisition, merger, or asset sale.

5. Lawful Bases for Processing

Where UK GDPR, EU GDPR, or similar laws apply, we rely on one or more of the following lawful bases, depending on the purpose:

  • Contract: where processing is necessary to provide the Service, manage accounts, process purchases, enable exports, or pay Sellers.
  • Legitimate Interests: where processing is necessary for marketplace operation, fraud prevention, product improvement, analytics, security, moderation, communications, and business administration, and those interests are not overridden by your rights.
  • Legal Obligation: where processing is necessary to comply with tax, accounting, sanctions, court, regulatory, consumer protection, or other legal requirements.
  • Consent: where required by law, such as for certain marketing or non-essential cookies.
  • Establishment, exercise, or defense of legal claims: where applicable.

If we rely on consent, you may withdraw that consent at any time, but withdrawal does not affect prior lawful processing.

6. How We Share Personal Data

We may share personal data with the following categories of recipients:

6.1 Other Users

We share information with other marketplace users where necessary to operate the Service. For example:

  • Seller profile information, listing information, and public marketplace content may be visible to visitors and users.
  • Purchased Collections and associated exports are made available to the relevant Buyer after purchase.
  • Request board postings and responses may be visible to other users depending on product settings.

6.2 Service Providers

We may share personal data with vendors and service providers that help us operate the Service, such as providers of:

  • authentication and identity management;
  • payment processing and payouts;
  • cloud hosting, storage, and infrastructure;
  • customer support and communications;
  • analytics, logging, performance monitoring, and error tracking;
  • security, fraud prevention, sanctions screening, and compliance.

These providers may include, for example, vendors that support account authentication and billing/payout workflows.

6.3 Legal and Compliance Recipients

We may disclose personal data:

  • to comply with law, regulation, subpoena, court order, or lawful request;
  • to enforce our Terms and other agreements;
  • to detect, prevent, or address fraud, abuse, security, or technical issues;
  • to protect the rights, property, safety, and security of Forsy, our users, or third parties.

6.4 Corporate Transactions

We may disclose personal data in connection with an actual or proposed financing, acquisition, merger, reorganization, asset sale, or bankruptcy transaction.

7. International Transfers

We may process and store personal data in countries other than the country where you reside. Where required by applicable law, we will use appropriate safeguards for international data transfers, such as contractual safeguards, adequacy decisions, or other approved mechanisms.

8. Data Retention

We retain personal data for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

  • provide and maintain the Service;
  • complete transactions and payouts;
  • preserve marketplace records;
  • enforce licenses and contractual restrictions;
  • resolve disputes and handle complaints;
  • comply with legal, tax, accounting, and regulatory obligations; and
  • maintain security, fraud prevention, and backup records.

Retention periods vary depending on the type of information, our legal obligations, operational needs, and whether the data is associated with an active account, marketplace transaction, or dispute.

Even if you delete your Account, we may retain certain information where required or permitted by law, for legitimate business purposes, or to preserve transaction records and existing licenses.

9. Cookies and Similar Technologies

We may use cookies, pixels, SDKs, local storage, and similar technologies to:

  • keep you signed in;
  • remember preferences and settings;
  • understand traffic, performance, and usage patterns;
  • secure the Service;
  • improve product functionality;
  • support analytics and, where permitted, marketing.

Where required by law, we will ask for consent before using non-essential cookies or similar technologies. You can control cookies through your browser settings and any consent tools we provide.

10. Security

We use reasonable administrative, technical, and organizational measures designed to protect personal data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

You are responsible for safeguarding your credentials, API keys, and connected account access.

11. Your Privacy Rights

Depending on your location and applicable law, you may have rights to:

  • access personal data we hold about you;
  • correct or update inaccurate data;
  • delete certain personal data;
  • restrict or object to certain processing;
  • receive a portable copy of certain personal data;
  • withdraw consent where processing is based on consent; and
  • lodge a complaint with a supervisory authority or regulator.

To exercise applicable rights, contact us at [Privacy Email]. We may need to verify your identity before responding. We may also decline or limit requests where permitted by law.

12. Marketing Communications

We may send you service-related communications necessary to operate your account and the Service.

We may also send marketing communications where permitted by law. You can opt out of marketing emails by using the unsubscribe link in the message or contacting us. Opting out of marketing messages will not affect essential service communications.

13. Third-Party Services

The Service may integrate with or link to third-party services, including payment providers, authentication providers, connected accounts, and external websites. This Privacy Policy does not govern third-party services, and we encourage you to review their privacy policies.

14. Children

The Service is not intended for children, and we do not knowingly collect personal data from anyone under 18. If you believe a child has provided personal data to us, contact us so we can take appropriate steps.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will post the updated version and update the “Last Updated” date. Where required by law, we will provide additional notice or obtain consent.

‍