Privacy policy.

We collect only what we need to operate the site and decide who gets access to the pack.

• Account data — when you sign in with Google or GitHub, we receive your name, email address, and profile image from that provider. We don't see your provider password.
• Request-access submissions — name, work email, organisation, and the use-case description you provide on the form.
• Team data — the team name you choose and the email addresses of people you invite.
• Operational logs — IP address, browser user-agent, and request timestamps, kept short-term for abuse-prevention and debugging.

We do not run third-party analytics, advertising, or behavioural tracking on this site. No cross-site cookies, no fingerprinting.

• To verify you're a real person and decide whether to grant access to Human Data v0.1.
• To send you transactional email — sign-in confirmations, team invites, and updates about your request status.
• To debug the service and keep it secure.

We will only email you about the product. No marketing blasts, no third-party offers.

We use Appwrite Cloud (US region) as our backend for authentication, team management, and form storage. Your data is held in their infrastructure under their security controls. We do not currently use any other third-party processor for personal data on this site.

We don't sell your data. We share it only:

• With Appwrite, our infrastructure provider, as needed to operate the site.
• If legally compelled (subpoena, court order) — and only the minimum required.
• With anyone you explicitly invite or share access with through a team.

• Account data — for as long as your account exists. Delete your account to remove it.
• Request-access submissions — up to 24 months after the decision, then deleted.
• Operational logs — 30 days, then rotated out.

If you're in the UK, EU, or California you have the right to:

• See the data we hold about you.
• Correct it if it's wrong.
• Delete it.
• Take it elsewhere (data portability).
• Object to specific processing.

Email privacy@forwardlane.com and we'll respond within 30 days.

The site is not directed at people under 16. We don't knowingly collect data from children. If you believe we have, write to us and we'll delete it.

If we change this policy, we'll bump the "Last updated" date at the top and — for material changes — email signed-in users before the change takes effect.

ForwardLane — privacy@forwardlane.com
For dataset-licensing questions: humandata@forwardlane.com