1. Who we are
Forrum is a professional recommendation platform built exclusively for investment professionals. We are operated by Forrum (forrum.ai). If you have any questions about this policy, contact us at privacy@forrum.ai.
2. What data we collect
We collect the following information when you use Forrum:
- Account information — your name, work email address, firm name, and role when you register.
- Recommendation data — the professional recommendations you add to your Forrum, including names, firms, ratings, notes, and deal context.
- Usage data — how you use the platform, including Ask Forrum queries, token usage, and feature interactions.
- Payment data — billing information processed securely by Stripe. We do not store card details.
- Technical data — IP address, browser type, device information, and cookies necessary for the service to function.
3. How we use your data
- To provide and improve the Forrum service
- To process your recommendations and power Ask Forrum AI
- To manage your account and subscription
- To send transactional emails — account approvals, billing notifications
- To monitor platform usage and prevent abuse
- To comply with legal obligations
4. How your recommendation data is handled
Your recommendation data is private by default. Specifically:
- Recommendations marked as Private are visible only to you.
- Recommendations marked as Shareable may contribute to anonymised, aggregated Forrum Scores — but individual names and your personal notes are never shared outside your organisation.
- Ratings of 1 or 2 stars are never shared with anyone outside your organisation under any circumstances.
- The Forrum community exchange shows only firm-level aggregated scores — never individual names or verbatim notes.
5. Third party services
We use the following third party services to operate Forrum:
- Supabase — database and authentication (EU region)
- Anthropic — AI processing for Ask Forrum queries
- Stripe — payment processing
- Resend — transactional email delivery
- Vercel — hosting and infrastructure
Each provider processes data in accordance with their own privacy policies and applicable data protection law.
6. Data retention
We retain your data for as long as your account is active. If you delete your account, your personal data and recommendations are permanently deleted within 30 days. Usage logs may be retained in anonymised form for up to 12 months for platform improvement purposes.
7. Your rights (GDPR)
Under UK and EU GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate personal data
- Request deletion of your personal data
- Object to or restrict processing of your data
- Data portability — receive your data in a machine-readable format
- Withdraw consent at any time
To exercise any of these rights, contact us at privacy@forrum.ai. We will respond within 30 days.
8. Cookies
Forrum uses only essential cookies required for authentication and session management. We do not use advertising or tracking cookies.
9. Changes to this policy
We may update this policy from time to time. We will notify you by email of any material changes. Continued use of Forrum after changes constitutes acceptance of the updated policy.