Privacy Policy

1. Introduction

Forward ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our email forwarding service.

By using Forward, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, password (encrypted), name
• Payment Information: Billing address, payment method (processed by Stripe)
• Domain Information: Domain names you add to your account
• Email Aliases: Alias configurations and destination addresses
• Support Communications: Messages you send to our support team

2.2 Automatically Collected Information

• Log Data: IP addresses, browser type, operating system, access times
• Email Metadata: Sender, recipient, timestamp, size, delivery status
• Usage Data: Features used, API calls, forwarding volume
• Cookies: Session cookies, preference cookies (see Cookie Policy)

2.3 Email Content

Important: We do NOT read, scan, or analyze the content of emails passing through our service for any purpose other than forwarding. Email content is transmitted through our servers solely for delivery purposes and is not stored beyond temporary processing.

3. How We Use Your Information

We use collected information to:

• Provide and maintain the email forwarding service
• Process your payments and manage subscriptions
• Send transactional emails (verification, password resets, receipts)
• Provide customer support
• Monitor and analyze usage to improve the service
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations
• Send important service updates (with option to opt-out of marketing)

4. Legal Basis for Processing (GDPR)

For users in the EU/EEA, we process your data based on:

• Contract Performance: Providing the service you subscribed to
• Legitimate Interests: Improving our service, fraud prevention
• Legal Compliance: Meeting regulatory requirements
• Consent: Marketing communications (you can withdraw anytime)

5. Data Sharing and Disclosure

We do NOT sell your personal information. We may share data with:

5.1 Service Providers

• Stripe: Payment processing
• Cloud Infrastructure: Hosting and database services
• Email Service: Transactional email delivery

All providers are contractually obligated to protect your data.

5.2 Legal Requirements

We may disclose information if required by law, court order, or to:

• Comply with legal processes
• Enforce our Terms of Service
• Protect rights, property, or safety
• Investigate fraud or security issues

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your data is transferred and becomes subject to a different privacy policy.

6. Data Retention

• Account Data: Retained while your account is active
• Email Logs: Retained according to your subscription plan (7-365 days)
• Email Content: Not stored (immediately deleted after forwarding)
• Deleted Accounts: Data deleted within 30 days of account closure
• Legal Requirements: Some data retained longer if legally required

7. Data Security

We implement industry-standard security measures:

• TLS/SSL encryption for data in transit
• Encryption at rest for sensitive data
• Regular security audits and updates
• Access controls and authentication
• Password hashing (bcrypt)
• DKIM, SPF, and SRS for email authentication

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

8. Your Rights and Choices

8.1 Access and Control

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Deletion: Request deletion of your data ("right to be forgotten")
• Portability: Export your data in a machine-readable format
• Restriction: Limit how we use your data
• Objection: Object to certain processing activities

8.2 How to Exercise Rights

To exercise these rights, contact us at forward@redsols.com or through your account settings. We will respond within 30 days.

8.3 Marketing Communications

You can opt out of marketing emails by clicking "unsubscribe" in any marketing email or updating your preferences in account settings. You cannot opt out of transactional emails.

9. Cookies and Tracking

We use cookies for:

• Authentication and session management
• Remembering your preferences
• Analytics and performance monitoring

See our Cookie Policy for details on managing cookies.

10. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) for EU data
• Data Processing Agreements with all processors
• Compliance with applicable data protection laws

11. Children's Privacy

Forward is not intended for users under 18 years of age. We do not knowingly collect information from children. If you believe we have collected information from a child, please contact us immediately.

12. California Privacy Rights (CCPA)

California residents have additional rights:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of sale of personal information (we don't sell data)
• Right to deletion
• Right to non-discrimination for exercising CCPA rights

13. Do Not Track

We do not currently respond to "Do Not Track" browser signals, as there is no industry consensus on how to interpret them.

14. Third-Party Links

Our service may contain links to third-party websites. We are not responsible for the privacy practices of these sites. We encourage you to review their privacy policies.

15. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or through the service. The "Last updated" date at the top indicates when the policy was last revised.

16. Contact Us

For privacy-related questions or to exercise your rights, contact us:

• Email: forward@redsols.com
• Company: Forward by Redsols
• Privacy Inquiries: forward@redsols.com

17. Supervisory Authority

If you are in the EU/EEA and believe we have not addressed your concerns, you have the right to lodge a complaint with your local data protection authority.