Privacy Policy

CivicForge Privacy Policy. Effective date: November 2, 2026.

CivicForge Inc. (“CivicForge,” “we,” “us”) builds research based, human centered personal AI agents, including Flow (a proactive daily execution agent) and George (your personal bookkeeper). This Privacy Policy explains what information we collect, how we use it, how we protect it, and the choices you have. It covers the civicforge.io website and the CivicForge agents you sign in to use. Questions or requests: operations@civicforge.io.

Summary. We collect only what an agent needs to do its job for you, plus what is needed to run your account and process payment. Flow connects to your Google Calendar in read only mode: it reads your events to build your daily brief and proposed schedule, and never creates, edits, moves, or deletes anything on your calendar. We do not sell your personal information, we do not use your Google data, bank data, or documents for advertising, and we do not use them to train generalized AI models. You can disconnect a data source or delete your account at any time; when you disconnect Google Calendar we revoke our access and delete the calendar events we imported.

Information we collect. Information you provide: your email address and, if you enable voice reminders, your phone number; schedule items, reminders, notes, and documents you upload (for example a class syllabus) so an agent can extract dates and tasks; messages you send us and a waitlist email you submit on our website. Google user data (Flow calendar connection): when you connect Google Calendar, Flow requests a single read only scope, https://www.googleapis.com/auth/calendar.readonly. We access your calendar list and the events on the calendars you keep visible, within a limited window of about the past week and the coming two weeks, and use them to build your daily brief, day view, and proposed schedule, and to speak upcoming events on a reminder call you asked for. We do not write to your calendar, sell or share this data, use it for advertising, or use it to train generalized AI models. Financial account data (George): if you connect a bank through Plaid, George reads your transactions in read only mode to provide spending guidance, using the Plaid Transactions product only; George never moves money. Bank access tokens are encrypted and stored server side. Payment data: subscription payments are processed by Stripe, which handles your card details under its own privacy policy; we do not store full card numbers. Automatic data: basic usage and diagnostic logs, with event titles, message subjects, and transaction descriptions redacted, and basic website analytics with no third party advertising trackers. Voice: audio is processed to transcribe speech and to place or receive reminder calls through our voice providers.

How we use information. To provide the agents you use, operate your account, process payment, provide support, and keep the service secure and compliant. We do not use your Google Calendar data, financial data, or uploaded documents to train generalized or foundation AI models.

How we share information. We do not sell your personal information. We share it only with service providers that help us run the service, each bound to protect it and use it only for us: Google (calendar access you authorize), Supabase (database and authentication), Railway (hosting), Stripe (payments), Plaid (bank transaction access for George), ElevenLabs and Twilio (voice generation, transcription, and calling), Anthropic (language model used to extract dates, generate explanations, and help write your daily brief using your calendar events), OpenRouter (backup access to language models if our primary provider is unavailable), and HubSpot (customer contact management). We may also disclose information if required by law, to protect rights and safety, or as part of a business transfer, continuing to protect it under this policy.

Google API Services User Data Policy. CivicForge’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. The calendar data Flow reads is used only to provide and improve the user facing features you see, is not transferred to others except as necessary to provide those features, to comply with law, or as part of a merger, is not used for advertising, and is not read by humans unless you consent, it is needed for security, or the law requires it.

How we protect information. Per user isolation with row level security; OAuth and bank tokens stored server side only, never in the browser, with bank tokens encrypted at rest; production data access limited to the systems that need it.

Retention and deletion. When you disconnect Google Calendar we revoke our access at Google and delete the calendar events we imported; you can also revoke access from your Google Account settings at any time. When you remove a bank or cancel, we remove the connection and stop syncing. You can request account deletion at operations@civicforge.io; we remove data we are not required to keep for legal, tax, or security reasons.

Your choices and rights. Connect or disconnect any data source at any time; access, correct, or delete your personal information by contacting us; opt out of voice calls and reminders in your settings. Depending on where you live you may have additional rights under laws such as the GDPR or CCPA; contact us to exercise them.

Voice demo. If you choose to use the Talk to Flow demo on our website, your browser will ask for permission to use your microphone. Your voice is sent to our voice technology service provider so the demo can listen and reply in real time. The demo does not record audio. Transcripts of demo conversations are kept for up to 7 days to operate and secure the service and are then deleted. The demo cannot see your calendar, account, or any other information about you, and nothing you say is added to a CivicForge account. Please do not share personal information during the demo.

Analytics. We use Google Analytics to understand how people find and use our website. Analytics cookies are set only if you accept them in our cookie banner, and you can change your choice at any time using Cookie Preferences. If you accept, we measure which pages and buttons are used, and when you start a checkout we pass a random analytics identifier to our payment processor. Our servers then use that identifier to tell Google Analytics, without your name or email, that a trial or purchase was completed, that your account was set up, and that a calendar was connected. We use this only to measure and improve our website and sign up process, not for advertising profiles. If you do not accept analytics cookies, none of this is linked to you.

Billing portal. Payments and billing are handled by Stripe. When you manage billing from Settings, you are taken to a page hosted by Stripe, and Stripe’s privacy policy applies to the information you enter there. We do not receive or store your full card number.

Children. CivicForge is not directed to children under 13 and we do not knowingly collect their personal information.

Changes. We may update this policy; material changes will be posted here with a new effective date and, where appropriate, noted on our Trust and Standards page.

Contact. CivicForge Inc., operations@civicforge.io, https://www.civicforge.io