Privacy & Data Handling
Last updated: July 2026
How ForgePilot handles your files
It depends on what you do with the file. A one-off upload in a chat is never written to disk. A file you upload to a Project, or a report you save to cloud storage, is kept in a private, encrypted bucket until you delete it. Here is exactly what happens in each case.
- 1Upload: The file is received into server memory as a raw byte stream.
- 2Process: The file is parsed. Text is extracted from PDFs; geometry data is extracted from STL and CAD files. This produces a text or structured representation of your file.
- 3Send to AI: The extracted content is included in a request to our AI provider's API for analysis. It is not used to train models.
- 4One-off upload → discarded: If you did not save the file to a Project, all file data is discarded once the response is returned. No database insert, no storage upload, no file system write.
- 5Saved to a Project → stored: If you upload a file to a Project, or save a generated report to cloud storage, it is written to a private, access-controlled bucket (encrypted at rest) and stays there, reusable across analyses from any device, until you delete it.
What is stored
Stored in our database and file storage (Supabase, encrypted at rest):
- —Account details: name, email, and authentication data, managed by Clerk. We never see or store your password.
- —Chats, analyses, and calculator runs saved to your account so you can return to them. Delete any thread from the workspace at any time.
- —Files you explicitly save: files uploaded to a Project, and reports saved to cloud storage, in a private bucket that is never publicly accessible.
- —Team membership and attribution: for team workspaces, who belongs to the team and who ran each analysis.
- —A usage counter (incremented by 1 per query)
- —Optional feedback you submit (thumbs up/down on a response), this contains no file content
Files private to your account (or your team) are never accessible to other users, and never used to train AI models.
AI processing
File and prompt content is processed via our AI provider's API. Our provider does not use API data to train its models. Standard API data retention applies, see OpenAI's privacy policy for details.
Export or delete your data
Delete individual threads, files, and projects directly in the workspace anytime. For a full account export or deletion, email hello@forgepilot.dev from your account address and we will act within 30 days. Full infrastructure and subprocessor details are on the security page.
Questions
If you have questions about data handling, contact: hello@forgepilot.dev