Draft for counsel review
This Privacy Policy describes how AwardForge is intended to operate. It is not legal advice and must be reviewed and approved by qualified counsel before production launch or marketing in regulated jurisdictions (including the EU/UK).
Privacy Policy
Last updated: May 2026 (draft)
Who we are
AwardForge is a subscription web application that helps U.S. military members draft unclassified award narratives. The operator identity must be confirmed by counsel before general availability.
Legal, privacy, and support contact details will be published here before general availability. Set NEXT_PUBLIC_LEGAL_CONTACT_EMAIL for pre-production staging.
What we process
Account identifiers from Firebase Authentication (Google, Apple, or email/password sign-in). Profile fields you provide: display name, contact email, optional phone, timezone, role, short bio, and service defaults. Email preference choices and consent timestamps. Billing metadata mirrored from Stripe. Wizard inputs, generated drafts, and usage counters stored in Firestore. Optional command profiles and uploaded guidelines for formatting assistance. Technical logs without intentional storage of full draft narratives in logs.
Anonymized product insights
When you use context review or red-pen review features, AwardForge may store anonymized signals (such as gap categories, review themes, branch, and award type) for aggregate trend analysis. Raw names, units, dates, and narrative text from your submissions are not stored in the insights repository. These aggregates help improve coaching content and are visible only to platform operators.
Scope — United States
AwardForge is intended for users in the United States and is not directed at individuals in the European Union, United Kingdom, or other regions outside the United States. If you access the service from another jurisdiction, you are responsible for compliance with local law.
Subprocessors
Google Cloud / Firebase (authentication, database, hosting). Stripe (payments, subscription management). Mailchimp (marketing and lifecycle email when you opt in). Mailchimp Transactional (Mandrill) for contact-email verification when configured. xAI (primary AI model) and optional OpenAI or Anthropic (fallback models) for drafting and review features.
Email and marketing
Transactional messages may be sent without marketing consent. Product updates and newsletters require Settings preferences, a verified contact email, and explicit marketing opt-in where applicable. You can withdraw consent in Settings.
Retention
Account and draft data: until you delete your account. When you delete your account, we remove your Firestore profile, drafts, and operator telemetry records linked to your user id (such as account activity events and AI request metrics). Billing records at Stripe may be retained as required for tax and accounting obligations after cancellation. Usage and rate-limit counters use rolling windows for operational limits.
Your privacy choices
Where applicable under U.S. law, you may request access to or deletion of personal data we hold. Use Settings → Export data for a JSON export of your account content. Use Settings → Delete account to remove your Firebase user, Firestore data, and linked operator telemetry.
Security
Access to your data is limited by authentication and Firestore security rules. Do not enter classified, CUI, or operational information—AwardForge is for unclassified drafting only.
Children
AwardForge is not directed to children under 16 and is intended for adult military professionals.
Changes
We may update this policy. Material changes should be communicated in-app or by email where required by law.
Contact
Legal, privacy, and support contact details will be published here before general availability. Set NEXT_PUBLIC_LEGAL_CONTACT_EMAIL for pre-production staging.