Privacy

RoadmapForge Privacy Policy

This policy explains how RoadmapForge collects, uses, and protects account, workspace, and public board data when you use the product. Workspace owners may have additional obligations for the content they collect from their own customers.

Last updated: March 27, 2026
Applies to: RoadmapForge accounts, public boards, roadmaps, API access, and webhooks
Contact: roadmapforge@gmail.com

Information we collect

We collect the information needed to run the service and support your workspace.

Account details such as your name, email address, password hash, profile image, and sign-in provider data.
Workspace data such as boards, statuses, posts, comments, votes, changelog items, invites, member roles, and branding settings.
Billing metadata from Stripe, including customer, subscription, and invoice references, but not full payment card numbers.
Integration settings you choose to configure, including API key records and webhook destinations.
Session cookies and workspace-selection cookies used to keep you signed in and route you to the correct workspace.

How we use information

We use personal and workspace data to operate, secure, and improve RoadmapForge.

Authenticate users, manage permissions, and prevent unauthorized access.
Render dashboards, public feedback boards, roadmaps, and post activity.
Send transactional emails such as invites, comments, and status updates when email is configured.
Process subscriptions, enforce plan limits, and support API or webhook features on eligible plans.
Troubleshoot issues, respond to support requests, investigate abuse, and improve reliability.

When information is shared

We only share information when it is necessary to deliver the service or comply with the law.

With infrastructure, database, hosting, authentication, and observability providers that help us operate the product.
With Stripe for subscription billing and payment administration.
With Resend or another configured email provider to deliver transactional emails.
With OAuth providers such as Google or GitHub if you choose those sign-in methods.
With third-party tools or endpoints you configure through the API or webhooks.
When required by law, to protect rights and safety, or as part of a merger, acquisition, or asset sale.

Retention, deletion, and workspace responsibility

We retain data for as long as needed to operate the service, meet legal obligations, and resolve disputes.

Workspace owners control whether a board is public and are responsible for the content collected from their users.
Eligible free workspaces can be deleted from the dashboard settings, which removes active workspace data from the application.
Deleted content may remain in backups or operational logs for a limited period before it is purged.
Subscription and billing records may be retained for accounting, fraud prevention, and legal compliance.

Security, transfers, and your choices

We use reasonable technical and organizational safeguards, but no system is completely immune from risk.

Your information may be processed in countries where our service providers operate.
You can request access, correction, or deletion of your account information by contacting us.
If you submit content to a public board, that content can be viewed by anyone with access to the board URL.
RoadmapForge is not directed to children under 16, and we do not knowingly collect their personal information.

Questions

For privacy requests, security questions, or vendor review follow-up: Contact roadmapforge@gmail.com.