Date of last revision: April 21, 2026
Date of last review: April 21, 2026
Privacy Policy
We respect your privacy and are committed to protecting it by complying with this privacy policy (“Policy”). This Policy describes the types of information we may collect from you or that you may provide (“Personal Information”) on the forgiveco.com website (“Website” or “Service”) and any of its related products and services (collectively, “Services”), and our practices for collecting, using, maintaining, protecting, and disclosing that Personal Information. It also describes the choices available to you regarding our use of your Personal Information and how you can access and update it.
This Policy is a legally binding agreement between you (“User,” “you,” or “you’re”) and ForgiveCo PBC Inc (doing business as “ForgiveCo,” “we,” “us,” or “our”). By accessing and using the Website and Services, you acknowledge that you have read, understood, and agree to be bound by the terms of this Policy. This Policy does not apply to the practices of companies that we do not own or control or to individuals that we do not employ or manage.
Collection of Personal Information
You can access and use the Website and Services without telling us who you are or revealing any information that could identify you as a specific, identifiable individual. If, however, you wish to use certain features on the Website, you may be asked to provide certain Personal Information (for example, your name and e-mail address). We receive and store any information you knowingly provide to us when you make a purchase or fill out any forms on the Website.
Privacy of Children
We do not knowingly collect any Personal Information from children under the age of 18. If we have reason to believe that a child under the age of 18 has provided Personal Information to us, please contact us to request its deletion.
Use and Processing of Collected Information
We act as a data controller and a data processor when handling Personal Information. We act as a data controller when we determine the purposes and means of processing (e.g., website access). We act as a data processor when we process Personal Information submitted through our Services in accordance with your instructions.
Any information we collect may be used for the following purposes:
Fulfill and manage orders and deliver Services
Improve products and Services
Send administrative and marketing communications
Respond to inquiries and offer support
Respond to legal requests and prevent harm
Run and operate the Website and Services
Processing is based on your consent, the performance of an agreement with you, compliance with legal obligations, or our legitimate business interests.
Disclosure of Information
To provide our Services, we may share your information with our affiliates and contracted service providers (“Service Providers”). We will share information only with the following categories:
Cloud computing and storage services
Communication and collaboration services
Data analytics services
Security and log monitoring services (e.g., Sophos, Sumo Logic)
Service Providers are authorized to use your information only as necessary to perform services on our behalf. We ensure all Service Providers adhere to security and privacy standards consistent with our own.
Retention of Information
We will retain your Personal Information for the period necessary to comply with our legal obligations, enforce our agreements, and resolve disputes. Unless a longer retention period is required by law (such as statutory requirements for financial records or debt relief documentation), Personal Information is retained for a maximum of 48 months.
California Privacy Rights (CCPA/CPRA)
Consumers residing in California are afforded rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). These include the right to:
Know what personal information is collected.
Delete personal information (subject to legal exceptions).
Correct inaccurate personal information.
Opt-out of the sale or sharing of personal information.
Non-discrimination for exercising these rights.
To exercise these rights, please contact us via the details below.
Cookies and Data Analytics
Our Website uses “cookies” to personalize your experience and track usage for security and statistical purposes. We use third-party analytics tools to monitor performance and improve our Services; these tools do not associate data with specific individual Users.
Information Security and SOC 2 Compliance
We maintain a robust security posture to protect your Personal Information from unauthorized access, use, or disclosure. ForgiveCo maintains a SOC 2 Type II attestation, meaning our internal controls, including administrative, technical, and physical safeguards, are independently audited against the AICPA Trust Services Criteria for Security and Confidentiality.
Our security stack includes:
Endpoint Protection: Continuous monitoring via Sophos.
Log Management: Real-time ingestion and security monitoring via Sumo Logic.
Encryption: Data is encrypted both at rest and in transit.
Access Control: Access to sensitive data is restricted to authorized personnel following the Principle of Least Privilege.
While we strive to use commercially acceptable means to protect your Personal Information, no method of transmission over the Internet is 100% secure.
Data Breach
In the event we become aware of a security breach, we will take reasonably appropriate measures, including investigation and reporting. We will make reasonable efforts to notify affected individuals without undue delay if we believe there is a reasonable risk of harm or if notice is required by law.
Changes and Amendments
We reserve the right to modify this Policy at any time. When we do, we will revise the updated date at the top of this page. Your continued use of the Website after changes are posted constitutes your consent to the updated terms.
Contacting Us
If you have any questions regarding this Policy or wish to exercise your rights, please contact us at: https://forgiveco.com/#contact