Privacy Notice

How Forge handles public website and intake data.

This notice covers Forge Orbital's public website, public contact links, and public security-intake surfaces. Customer deployments, private pilots, and confidential diligence materials are governed by the applicable written agreement.

Information Forge May Receive

Contact information you choose to provide, such as name, email, organization, and message content.
Security reports submitted through the public vulnerability-intake channel.
Basic technical metadata needed to operate and protect the site, such as request time, IP-derived security signals, user agent, route, and rate-limit events.
Materials shared under a separate NDA, pilot, procurement, or customer agreement.

How Forge Uses It

To respond to inquiries, evaluate fit, and coordinate next steps.
To operate, secure, monitor, and improve public website and security-intake surfaces.
To investigate security reports, preserve audit records, and meet legal or contractual obligations.
To support agreed diligence, pilot, or procurement workflows.

Sharing

Forge does not sell personal information. Forge may share information with service providers, professional advisers, security responders, contracting counterparties, or authorities when needed to operate the business, protect systems, comply with law, or perform an agreed engagement.

Public Intake Boundary

Do not submit classified material, export-controlled material, third-party confidential data, credentials, customer production data, or sensitive proof through public forms or ordinary email. Start with a non-sensitive summary and Forge will coordinate the appropriate protected channel.

Retention and Updates

Forge retains public-contact and security-intake records for as long as needed for business, security, audit, legal, or contractual purposes. This notice may be updated as Forge's public surfaces and customer workflows mature.

Last updated: May 10, 2026.