CivicForge Privacy Policy. Effective date: August 19, 2026.

CivicForge Inc. (“CivicForge,” “we,” “us”) builds research based, human centered personal AI agents, including Flow (a proactive daily execution agent) and George (a proactive spending decision agent). This Privacy Policy explains what information we collect, how we use it, how we protect it, and the choices you have. It covers the civicforge.io website and the CivicForge agents you sign in to use. Questions or requests: operations@civicforge.io.

Summary. We collect only what an agent needs to do its job for you, plus what is needed to run your account and process payment. Flow connects to your Google Calendar in read only mode: it reads your events to build your daily brief and proposed schedule, and never creates, edits, moves, or deletes anything on your calendar. We do not sell your personal information, we do not use your Google data, bank data, or documents for advertising, and we do not use them to train generalized AI models. You can disconnect a data source or delete your account at any time; when you disconnect Google Calendar we revoke our access and delete the calendar events we imported.

Information we collect. Information you provide: your email address and, if you enable voice reminders, your phone number; schedule items, reminders, notes, and documents you upload (for example a class syllabus) so an agent can extract dates and tasks; messages you send us and a waitlist email you submit on our website. Google user data (Flow calendar connection): when you connect Google Calendar, Flow requests a single read only scope, https://www.googleapis.com/auth/calendar.readonly. We access your calendar list and the events on the calendars you keep visible, within a limited window of about the past week and the coming two weeks, and use them to build your daily brief, day view, and proposed schedule, and to speak upcoming events on a reminder call you asked for. We do not write to your calendar, sell or share this data, use it for advertising, or use it to train generalized AI models. Financial account data (George): if you connect a bank through Plaid, George reads your transactions in read only mode to provide spending guidance, using the Plaid Transactions product only; George never moves money. Bank access tokens are encrypted and stored server side. Payment data: subscription payments are processed by Stripe, which handles your card details under its own privacy policy; we do not store full card numbers. Automatic data: basic usage and diagnostic logs, with event titles, message subjects, and transaction descriptions redacted, and basic website analytics with no third party advertising trackers. Voice: audio is processed to transcribe speech and to place or receive reminder calls through our voice providers.

How we use information. To provide the agents you use, operate your account, process payment, provide support, and keep the service secure and compliant. We do not use your Google Calendar data, financial data, or uploaded documents to train generalized or foundation AI models.

How we share information. We do not sell your personal information. We share it only with service providers that help us run the service, each bound to protect it and use it only for us: Google (calendar access you authorize), Supabase (database and authentication), Railway (hosting), Stripe (payments), Plaid (bank transaction access for George), ElevenLabs and Twilio (voice generation, transcription, and calling), and Anthropic (language model used to extract dates and generate explanations). We may also disclose information if required by law, to protect rights and safety, or as part of a business transfer, continuing to protect it under this policy.

Google API Services User Data Policy. CivicForge’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. The calendar data Flow reads is used only to provide and improve the user facing features you see, is not transferred to others except as necessary to provide those features, to comply with law, or as part of a merger, is not used for advertising, and is not read by humans unless you consent, it is needed for security, or the law requires it.

How we protect information. Per user isolation with row level security; OAuth and bank tokens stored server side only, never in the browser, with bank tokens encrypted at rest; production data access limited to the systems that need it.

Retention and deletion. When you disconnect Google Calendar we revoke our access at Google and delete the calendar events we imported; you can also revoke access from your Google Account settings at any time. When you remove a bank or cancel, we remove the connection and stop syncing. You can request account deletion at operations@civicforge.io; we remove data we are not required to keep for legal, tax, or security reasons.

Your choices and rights. Connect or disconnect any data source at any time; access, correct, or delete your personal information by contacting us; opt out of voice calls and reminders in your settings. Depending on where you live you may have additional rights under laws such as the GDPR or CCPA; contact us to exercise them.

Children. CivicForge is not directed to children under 13 and we do not knowingly collect their personal information.

Changes. We may update this policy; material changes will be posted here with a new effective date and, where appropriate, noted on our Trust and Standards page.

Contact. CivicForge Inc., operations@civicforge.io, https://www.civicforge.io