Privacy Policy

    Last updated: 22 October 2026

    PrintForgeApps ABN (trading as "ProofForge") operates the ProofForge platform at proofforge.printforgeapps.com. This Privacy Policy explains how we collect, use, disclose and protect your personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

    1. Information We Collect

    We collect information you provide directly:

    • Account information — name, email address and password when you sign up
    • Business details — company name, ABN, address, phone, logo and brand settings
    • Client data — names, email addresses and company details of your clients that you add to the platform
    • Files — artwork files (PDFs, images) you upload for proofing
    • Contact form submissions — name, email and message content
    • Payment information — processed securely by Stripe; we do not store card details

    We also collect information automatically:

    • Usage data — pages visited, features used, timestamps
    • Device information — browser type, operating system, screen resolution

    2. How We Use Your Information

    • To provide and operate the ProofForge platform
    • To send proof links and notifications to your clients on your behalf
    • To process payments and manage subscriptions
    • To respond to support enquiries and contact form submissions
    • To improve our services and fix bugs
    • To comply with legal obligations

    3. Sharing Your Information

    We do not sell your personal information. We share data only with:

    • Service providers — hosting (Supabase/AWS), payment processing (Stripe), email delivery, and analytics tools that help us operate the platform
    • Your clients — when you share a proof, clients see the proof content, your brand settings, and any notes you include
    • Legal requirements — if required by law, regulation or legal process

    4. Data Storage & Security

    Your data is stored on enterprise-grade cloud infrastructure. Files are stored in private buckets with temporary signed URLs — they are never publicly accessible. We use encryption in transit (TLS) and at rest. Access is protected by row-level security policies and authentication.

    5. Data Retention

    We retain your data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law. Uploaded files are deleted when the associated job is deleted.

    6. Your Rights

    Under the Australian Privacy Principles, you have the right to:

    • Access the personal information we hold about you
    • Request correction of inaccurate information
    • Request deletion of your data
    • Unsubscribe from non-essential emails
    • Lodge a complaint with the Office of the Australian Information Commissioner (OAIC)

    7. Cookies

    Google Ads (Google LLC) receives page visits, advertising click identifiers, completed free-trial registrations, browser and device information, IP addresses and advertising cookies for conversion measurement and ad optimisation. We do not send your email, phone number or customer matching identifiers. A conversion records a successful new trial account, not a paid subscription or a returning dashboard visit.

    Advertising tracking is blocked until you accept in the EEA, UK, Switzerland and Canada (our country-level lookup cannot distinguish Quebec), or when your region is unknown. Elsewhere it runs without a banner, respecting refusals and supported browser opt-outs. Use Cookie settings at the bottom of the page to accept, reject or withdraw at any time. We save a visitor reference, date, region and the notice and choice history in your browser to retain consent evidence; withdrawal does not erase earlier acceptance. Blocked conversions are not replayed after acceptance. Google Analytics and the Meta Pixel keep their existing regional exclusions and also respect a rejection here.

    We use essential cookies for authentication and session management.

    On our marketing and sign-up pages we use the Meta Pixel (Meta Platforms, Inc.) to measure the results of our Facebook and Instagram ads and improve who they are shown to. It records pages visited, account sign-ups, your browser details, IP address and Meta cookies, and shares them with Meta. It does not run on proof or portal pages your clients open, and it is not loaded for visitors in the EU, EEA, UK or Switzerland. You can opt out by blocking third-party cookies, using your Facebook ad preferences, or contacting us to ask questions.

    We also use Google Analytics 4 (Google LLC) on the same marketing and sign-up pages to understand how visitors find and use our website — pages visited, approximate location, device and browser details. Like the Meta Pixel, it does not run on proof or portal pages your clients open, and it is not loaded for visitors in the EU, EEA, UK or Switzerland. You can opt out with Google's Analytics Opt-out Browser Add-on or by blocking third-party cookies.

    8. Third-Party Links

    Our platform may contain links to third-party websites. We are not responsible for their privacy practices.

    9. Children

    ProofForge is not intended for use by individuals under 18 years of age.

    10. Changes to This Policy

    We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the platform.

    11. Contact Us

    If you have questions about this Privacy Policy or wish to make a privacy-related request, contact us at: