Privacy Policy
Last Updated: December 15, 2025
Introduction
ExportForge ("we", "us", or "our") operates https://api.exportforge.com and provides data export generation services via our API (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
By using ExportForge, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, do not use our Service.
Information We Collect
Account Information
When you create an ExportForge account, we collect:
- Email address
- Full name
- Company name (optional)
- Password (encrypted)
- Billing information (processed through our payment provider)
API Usage Data
When you use our API, we collect:
- API requests and responses (metadata only)
- Request timestamps and response times
- API key identifiers (hashed)
- IP addresses
- Export metadata (file names, formats, record counts)
- Error logs and debugging information
Payment Information
We use third-party payment processors to process payments. We do not store your credit card or billing information on our servers.
Automatically Collected Information
- Browser type and version
- Operating system
- Device information
- Referring URLs
- Pages visited on our website
- Time and date of access
Your Export Data
Temporary Data Storage
We do not permanently store your export data. Here's how we handle the data you send us:
1. During Upload:
- Your JSON data is temporarily stored on our servers as you upload it in chunks
- Data is encrypted at rest using AES-256 encryption
- Data is encrypted in transit using TLS 1.3
2. During Processing:
- We process your data to generate the requested file formats (CSV, Excel, TSV, XML, JSON)
- Generated files are temporarily stored for download
3. After Generation:
Your export files are available for download during the retention period:
- Free Plan: 24 hours
- Starter Plan: 72 hours
- Developer Plan: 7 days
- Professional Plan: 14 days
4. After Expiration:
- All data is permanently and automatically deleted after the retention period expires
- Both source data and generated files are completely removed from our systems
- Data cannot be recovered after deletion
What We Do NOT Do With Your Data
- We do not read or analyze your export data beyond what is necessary to generate your requested files
- We do not share your data with any third parties
- We do not use your data for machine learning, AI training, or analytics
- We do not sell your data to anyone
- We do not retain your data beyond the specified retention period
- We do not create backups of your export data after the retention period
Data Isolation
- Each export is isolated and can only be accessed by your account
- Export download URLs contain secure, unguessable tokens
- No other users or accounts can access your exports
How We Use Your Information
We use the information we collect for the following purposes:
Service Delivery
- Process API requests and generate export files
- Provide customer support
- Monitor and maintain service performance
- Detect and prevent fraud or abuse
- Comply with legal obligations
Communication
- Send transactional emails (export completion notifications, error alerts)
- Respond to your inquiries
- Send service announcements and updates
- Send billing-related communications
Service Improvement
- Analyze usage patterns to improve our Service (using aggregated, anonymized data only)
- Monitor API performance and reliability
- Identify and fix bugs
Marketing (with your consent)
- Send promotional emails about new features
- Share product updates and company news
You can opt out of marketing communications at any time by clicking the unsubscribe link in any marketing email or by contacting us at privacy@exportforge.com.
Data Sharing and Disclosure
We Do Not Sell Your Data
We do not sell, rent, or trade your personal information or export data to third parties for marketing purposes.
Service Providers
We may share limited information with third-party service providers who assist us in operating our Service:
- Stripe - Payment processing (they receive billing information)
- Amazon Web Services (AWS) - Infrastructure and hosting
- SendGrid - Transactional email delivery
- Cloudflare - CDN and DDoS protection
These providers are contractually obligated to protect your data and may only use it to provide services to us.
Legal Requirements
We may disclose your information if required to do so by law or in response to:
- Valid legal processes (court orders, subpoenas, search warrants)
- Requests from government authorities
- Situations involving potential threats to safety
- Protection of our rights, property, or safety
Business Transfers
If ExportForge is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you via email and/or prominent notice on our website before your information is transferred and becomes subject to a different privacy policy.
Data Security
Security Measures
We implement industry-standard security measures to protect your information:
- Encryption in Transit: All data transmission uses TLS 1.3
- Encryption at Rest: All stored data is encrypted using AES-256
- Access Controls: Strict role-based access controls limit who can access data
- Authentication: API keys use secure hashing (SHA-256)
- Monitoring: 24/7 security monitoring and intrusion detection
- Regular Audits: Periodic security assessments and penetration testing
- Automatic Deletion: Automated systems ensure data deletion after retention periods
Data Breach Notification
In the event of a data breach that affects your personal information, we will:
- Notify you after discovering the breach
- Provide details about what information was affected
- Describe steps we're taking to address the breach
- Advise you on steps you can take to protect yourself
Your Rights and Choices
Access and Portability
You have the right to:
- Access your personal information
- Request a copy of your data in a portable format (JSON)
- Review what information we have about you
To request your data: Contact us at privacy@exportforge.com
Correction
You have the right to:
- Update incorrect personal information
- Complete incomplete information
To update your information: Log in to your dashboard at https://app.exportforge.com/account
Deletion
You have the right to request deletion of:
- Your account
- Your personal information
- Active exports before they expire
To delete your account: Contact us at privacy@exportforge.com or use the account deletion feature in your dashboard.
Note: Once your account is deleted, all associated data (including active and completed exports) will be immediately and permanently deleted.
Opt-Out
You have the right to:
- Unsubscribe from marketing emails
- Disable certain cookies (see Cookie Policy below)
- Object to certain data processing activities
Data Retention
- Account Information: Retained while your account is active and for 90 days after deletion
- Billing Records: Retained for 7 years for tax and accounting purposes
- API Usage Logs: Retained for 90 days for debugging and security purposes
- Export Data: Automatically deleted after retention period (24 hours to 14 days depending on plan)
International Data Transfers
ExportForge is based in the United States. If you are accessing our Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States and other countries where our service providers operate.
We ensure appropriate safeguards are in place when transferring data internationally, including:
- Standard contractual clauses approved by the European Commission
- Ensuring service providers are Privacy Shield certified or have adequate protections
- Encryption of data in transit and at rest
Children's Privacy
Our Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@exportforge.com, and we will delete such information immediately.
Cookies and Tracking Technologies
What We Use
Essential Cookies:
- Session management
- Authentication
- Security features
Analytics Cookies (with your consent):
- Google Analytics (anonymized IP addresses)
- Usage patterns and performance monitoring
Preference Cookies:
- Language preferences
- Interface customization
Your Choices
You can control cookies through your browser settings. However, disabling essential cookies may affect the functionality of our Service.
To learn more about cookies and how to manage them, visit https://www.allaboutcookies.org/
Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.
California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
Right to Know
You have the right to request:
- What personal information we collect
- Sources from which we collect information
- Purposes for collecting information
- Categories of third parties with whom we share information
Right to Delete
You have the right to request deletion of your personal information, subject to certain exceptions.
Right to Opt-Out
You have the right to opt-out of the sale of your personal information. Note: We do not sell personal information.
Right to Non-Discrimination
We will not discriminate against you for exercising your CCPA rights.
To exercise your CCPA rights: Email us at privacy@exportforge.com or call us at 1-800-XXX-XXXX
European Privacy Rights (GDPR)
If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):
Legal Basis for Processing
We process your personal information based on:
- Contract: To provide our Service to you
- Legitimate Interests: To improve our Service and prevent fraud
- Consent: For marketing communications (you can withdraw consent at any time)
- Legal Obligation: To comply with applicable laws
Your GDPR Rights
- Right to access your personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent
- Right to lodge a complaint with a supervisory authority
To exercise your GDPR rights: Contact us at privacy@exportforge.com
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make changes, we will:
- Update the "Last Updated" date at the top of this policy
- Notify you via email if changes are material
- Post a notice on our website for 30 days
Your continued use of the Service after changes become effective constitutes acceptance of the revised Privacy Policy.
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Email: privacy@exportforge.com
Response Time: We will respond to privacy inquiries within 30 days.
Commitment to Privacy
At ExportForge, we are committed to:
- Transparency about how we collect and use your information
- Protecting your data with industry-leading security measures
- Giving you control over your information
- Never selling your data to third parties
- Automatically deleting your export data after the retention period
- Respecting your privacy rights under applicable laws
We believe in treating your data with respect and giving you the tools to manage your privacy preferences.