Privacy Policy

01Who we are

Hera Forge Inc. ("HERA FORGE", "we") operates www.heraforge.com and the AI Hypermarketing service described on it.

For questions about this policy, or to exercise any of the rights below, contact info@heraforge.com.

02What we collect

We collect the information you submit through our forms. If you choose to allow analytics, Google Analytics also counts visits to public pages and service or phone referral clicks, and Metricool separately counts visits to public pages, receiving the public page address, the referring address, your browser window size and your IP address. Form values, portal activity, account information and URL query parameters are excluded.

• Contact details — first and last name, email address, phone number, and your role
• Business details — business name, website, industry, company size, monthly marketing spend, the channels you use today, and your timeline
• What you tell us — what you are trying to achieve and what is getting in the way, in your own words
• How you found us — the option you select, if you select one
• Payment records — the amount, currency, and Stripe reference for any purchase, plus the date you accepted our terms and which version you accepted
• Technical — your IP address is used transiently to rate-limit our forms against abuse

03Why we hold it, and on what basis

To hold your position on the waitlist and contact you when your cohort opens — this is the service you asked us for.

To research your company and build your roadmap if you commission one — performance of our contract with you.

To take and record payment, and to meet our tax and accounting obligations — legal obligation.

To protect the site from abuse and fraud — our legitimate interest in keeping the service working for everyone.

04Payments

Payments are processed by Stripe. Your card number never reaches our servers and we never see or store it.

We keep only what we need to recognise your purchase: the amount, the currency, the date, and Stripe’s reference for the transaction.

Stripe processes your payment data as an independent controller under its own privacy policy at stripe.com/privacy.

05What we do not do

Optional Meta marketing measurement shares visits to our public homepage and Trump Mobile page, outbound referral clicks, IP address, browser information and cookie identifiers with Meta only after a separate marketing choice. Meta may use this information for ad measurement and personalization under its privacy policy at facebook.com/privacy/policy. Automatic page/product enrichment, automatic events and advanced matching are disabled. No form values, payment details or portal activity are sent. Optional Google Analytics runs only with your analytics consent. Google Signals, advertising storage and advertising personalization are disabled. We do not use it to build profiles of you across other websites. Optional Metricool analytics runs only after a separate Metricool choice and counts visits to our public pages for our own traffic reporting. Metricool sets no cookies and stores nothing in your browser: each visit is a single request to Metricool carrying the public page address, the referring address and your browser window size. It is not used for advertising personalization, and no form values, payment details or portal activity are sent.

06Cookies and browser storage

Meta advertising cookies (_fbp and, where applicable, _fbc) may be set after marketing consent. They are removed when you withdraw that consent. Your marketing choice is stored in hf_marketing_choice_v1 for 180 days. Analytics & marketing preferences lets you withdraw any of these choices independently. Optional Google Analytics cookies are set only after you allow analytics, expire within 180 days, and are removed when you withdraw consent using Analytics preferences. Metricool sets no cookies and no browser storage at all. The following storage is also used:

• hf_signal and hf_signal_seen — stored in your browser’s session storage so we do not show you the same updates prompt twice. Cleared when you close the tab, and never sent to us.
• hf_analytics_choice_v1 — stores your analytics choice on this device for 180 days. Analytics preferences in the main-site and Trump Mobile footers let you change it. Declining prevents the Google tag from loading and does not affect access to the site.
• hf_metricool_choice_v1 — stores your Metricool choice on this device for 180 days. Analytics & marketing preferences lets you change it. Declining prevents the Metricool tag from loading and does not affect access to the site.
• hf_admin — a session cookie set only when a member of our team signs in to the private admin area. It is never set for visitors.

07Who else processes your data

We keep the list of services that touch your data deliberately short:

• Meta — processes optional marketing events after separate marketing consent; only the public homepage and Trump Mobile page are eligible. Pages with query strings or fragments, private pages and detailed referrers are excluded
• Vercel — hosts the website and runs its server code
• Neon — provides the database your signup is stored in
• Stripe — processes payments
• Google Analytics — processes optional public-page visit and referral-click information only after analytics consent; no form data, portal data, raw URL query parameters or account identifiers are sent
• Metricool — processes optional public-page visit information only after separate Metricool consent; it sets no cookies, and private pages, pages with unexpected query strings or fragments, and detailed referrers are excluded

08Where your data is held

Our website and database are hosted in the United States. If you are in the UK, EEA or elsewhere, your information is transferred there and protected by the safeguards our providers have in place, including standard contractual clauses where they apply.

09How long we keep it

Waitlist and newsletter records are kept until you ask us to remove them, or until the waitlist is closed and the cohort programme has ended.

Payment and consent records are kept for as long as tax and accounting law requires — typically seven years.

Rate-limiting records, which contain an IP address, are deleted automatically after a day.

10Your rights

Whatever your jurisdiction, we will honour the following on request:

• Ask what we hold about you, and get a copy
• Correct anything that is wrong
• Have your data deleted, subject to records we must keep by law
• Withdraw consent, or object to how we use your information
• Ask us not to send you updates — every email we send will let you stop them

11How to exercise them

Email info@heraforge.com. We will respond within 30 days and will not charge you for it.

If you are unhappy with our response and you are in the UK or EEA, you may complain to your local data protection authority.

12Security

Data is transmitted over HTTPS and stored in an access-controlled database. Card details are handled entirely by Stripe. Access to the admin area is restricted, rate-limited against guessing, and logged.

No system is perfectly secure, and we will not pretend otherwise. If a breach affects your data, we will tell you and the relevant authority as the law requires.

13Children

This is a business service and is not directed at anyone under 18. We do not knowingly collect information from children.

14Changes

If we change this policy we will update the version and date at the top of this page. Material changes affecting people already on our list will be sent by email.