Privacy Policy.
How AlphaForge collects, uses, and protects your data.
Last updated: February 27, 2026
AlphaForge (“we,” “us,” or “our”) is operated by InvestorConnectAI. This Privacy Policy describes how we collect, use, and protect information when you visit our website at alphaforgeusa.com or use our AI agent services.
1. Information We Collect
Information You Provide
- Contact forms: name, email address, company name, and message content
- Agent Architect wizard: industry, workflow pain points, hours spent, team size, and your recommended package
- Newsletter signup: email address
- Payment information: processed directly by Stripe — we do not store your credit card details
- Agent service data: API credentials, workflow data, and content you provide for agent configuration during onboarding
Information Collected Automatically
- Usage data: pages visited, time on site, referral source
- Device data: browser type, operating system, screen resolution
- Cookies: we use essential cookies for site functionality. We do not use advertising or tracking cookies.
2. How We Use Your Information
- To respond to your inquiries and provide customer support
- To build, deploy, and maintain your AI agents
- To process payments and manage your subscription
- To send service-related communications (build updates, maintenance notices, billing)
- To send marketing communications you have opted into (e.g., newsletter)
- To improve our website and services
- To comply with legal obligations
3. Third-Party Services
We use the following third-party services to operate our business:
| Service | Purpose | Data Shared |
|---|---|---|
| Stripe | Payment processing | Payment details (handled directly by Stripe) |
| Anthropic (Claude) | AI agent inference | Workflow data processed by your agents |
| AgentMail | Email handling | Email content for agent-managed inboxes |
| Cloudflare | DNS & CDN | Standard web request logs |
| Calendly | Scheduling | Name, email for meeting booking |
Each third-party service has its own privacy policy. We encourage you to review them.
The table above covers our own website and business operations. Where we operate AI agents on behalf of a client, additional services process the data of people who call or message that client. Those are listed in Section 10 and on our AI Disclosure page.
4. Data Retention
- Active clients: data retained for the duration of your subscription plus 30 days
- Post-cancellation: data exported within 7 days of request and permanently deleted within 30 days
- Contact form submissions: retained for 2 years or until you request deletion
- Newsletter subscribers: retained until you unsubscribe
- Payment records: retained as required by tax and accounting regulations
5. Data Security
We implement reasonable security measures to protect your data, including:
- Encrypted connections (TLS/SSL) for all data in transit
- Access controls limiting data access to authorized personnel
- Infrastructure hosted in the United States on managed servers
- Regular security reviews and updates
- Breach notification within 48 hours of discovery
6. Your Rights
Depending on your location, you may have the right to:
- Access: request a copy of the personal data we hold about you
- Correction: request corrections to inaccurate data
- Deletion: request deletion of your personal data
- Portability: request your data in a portable format
- Opt-out: unsubscribe from marketing communications at any time
California Residents (CCPA)
California residents have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information.
EU/EEA Residents (GDPR)
If you are located in the EU/EEA, you have additional rights under the General Data Protection Regulation, including the right to lodge a complaint with a supervisory authority.
7. Cookies
We use only essential cookies required for basic site functionality (e.g., session management). We do not use advertising cookies, tracking pixels, or third-party analytics cookies. You can disable cookies in your browser settings, but some site features may not function properly.
8. Children's Privacy
Our services are not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe we have collected data from a child, contact us and we will delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email to active clients or posted on this page with an updated effective date.
10. AI Agents, Calls, and Caller Data
Where a client engages us to operate AI agents, those agents interact with the client's own callers, visitors and correspondents. This section describes what happens to their information. In that processing the client is the controller of the data and AlphaForge is a processor acting on the client's instructions.
What is collected on a call or chat
- The caller's telephone number as reported by the carrier
- Name, email address and callback number where the caller provides them
- A description of the reason for contact, in the caller's own words
- A machine transcript of the conversation
- An audio recording of the call, where recording is enabled for that client
- Call metadata — time, duration, and outcome
Recording
Whether calls are recorded, and whether callers are told, is configured per client and is the client's decision. Consent requirements for recorded calls vary by state, and several states require the consent of all parties. The client is responsible for determining what its jurisdiction requires and for instructing us accordingly; we configure the agent to match that instruction. If you are a caller and want to know whether a particular firm records its calls, ask the firm, or contact us using the details below and we will direct you to them.
Retention
- Transcripts, recordings and call logs are held by our voice platform under a retention window configured per agent
- The lead record created from a call is held in the client's own database for as long as the client's subscription runs, and is subject to the deletion terms in Section 4
- Where a client instructs us to do so, stored transcripts and recordings can be held with personal information redacted
- Retention settings for a specific client's deployment are disclosed to that client on request
Services that process caller data
| Service | Role in the call | Data processed |
|---|---|---|
| Twilio | Telephony | Call metadata; call audio in transit |
| Retell | Hosts the voice agent; stores transcripts, recordings and logs | Transcripts, recordings, call metadata |
| OpenAI | Language model generating the agent's replies | Conversation text sent for a reply |
| ElevenLabs | Speech synthesis — the agent's voice | The text the agent is about to speak |
| Neon Postgres | Stores the resulting lead and call record | Contact details, matter description, call summary |
| Resend | Notifies the firm of a new inquiry | Contact details and summary, sent to the firm |
The complete list, including the services that support our own operations, is on the AI Disclosure page.
Training
We do not train models on caller data, and we do not permit our providers to use it to train shared models where their terms give us that choice. The current, itemised position for each service in the voice path — including which assurances rest on an executed agreement and which do not yet — is stated on the AI Disclosure page and is available to clients in writing on request.
If you are a caller and want your data deleted
You can ask us directly, using the contact details below, and we will act on your request. Because the firm you contacted is the controller of that information and may have its own professional obligations to retain records, we will also notify the firm of your request and will tell you if it is the firm rather than us that must decide. We aim to acknowledge a request within 5 business days.
Contact Us
For privacy-related requests or questions, contact us at:
- Email: mike.elliott@alphaforgeusa.com
- Or visit our Contact page