Draft for counsel review
This Privacy Policy describes how AwardForge is intended to operate. It is not legal advice and must be reviewed and approved by qualified counsel before production launch or marketing in regulated jurisdictions (including the EU/UK).
Privacy Policy
Last updated: May 2026 (draft)
Who we are
AwardForge is a subscription web application that helps U.S. military members draft unclassified award narratives. The operator identity must be confirmed by counsel before general availability.
Legal, privacy, and support contact details will be published here before general availability. Set NEXT_PUBLIC_LEGAL_CONTACT_EMAIL for pre-production staging.
What we process
Account identifiers from Firebase Authentication (Google, Apple, or email/password sign-in). Profile fields you provide: display name, contact email, optional phone, timezone, role, short bio, and service defaults. Email preference choices and consent timestamps. Billing metadata mirrored from Stripe. Wizard inputs, generated drafts, and usage counters stored in Firestore. Optional command profiles and uploaded guidelines for formatting assistance. Technical logs without intentional storage of full draft narratives in logs.
Anonymized product insights
When you use context review or red-pen review features, AwardForge may store anonymized signals (such as gap categories, review themes, branch, and award type) for aggregate trend analysis. Raw names, units, dates, and narrative text from your submissions are not stored in the insights repository. These aggregates help improve coaching content and are visible only to platform operators.
Legal bases (GDPR-oriented)
Contract — providing the service you subscribe to. Consent — marketing and non-essential email when you opt in and verify your contact email. Legitimate interests — security, abuse prevention, and product improvement.
Subprocessors
Google Cloud / Firebase (authentication, database, hosting). Stripe (payments, subscription management). Mailchimp (marketing and lifecycle email when you opt in). Mailchimp Transactional (Mandrill) for contact-email verification when configured. xAI (primary AI model) and optional OpenAI or Anthropic (fallback models) for drafting and review features.
Email and marketing
Transactional messages may be sent without marketing consent. Product updates and newsletters require Settings preferences, a verified contact email, and explicit marketing opt-in where applicable. You can withdraw consent in Settings.
International transfers
Subprocessors may process data in the United States and other countries. Appropriate transfer mechanisms must be documented by counsel before EU/UK processing.
Retention
Account and draft data: until you delete your account or request erasure. Billing records: as required for tax and accounting obligations after cancellation. Usage and rate-limit counters: rolling windows for operational limits.
Your rights
Depending on jurisdiction, you may have rights to access, rectify, delete, restrict, object, or export personal data. Use Settings → Export data for a JSON export. Use Settings → Delete account to remove your Firebase user and Firestore data.
Security
Access to your data is limited by authentication and Firestore security rules. Do not enter classified, CUI, or operational information—AwardForge is for unclassified drafting only.
Children
AwardForge is not directed to children under 16 and is intended for adult military professionals.
Changes
We may update this policy. Material changes should be communicated in-app or by email where required by law.
Contact
Legal, privacy, and support contact details will be published here before general availability. Set NEXT_PUBLIC_LEGAL_CONTACT_EMAIL for pre-production staging.