Privacy Policy

This Privacy Policy explains how ForQ Inc. (“ForQ,” “we,” “us,” or “our”) collects, uses, discloses, and protects information about you when you visit our website at noderhq.com, sign in with Google, join our waitlist, or use the ForQ applications and related services (collectively, the “Services”).

By using the Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with it, please do not use the Services.

1. Information we collect

Information you provide to us

• Waitlist information. When you join our waitlist, we collect your email address and, optionally, your first name.
• Account and profile content. Content you choose to add to the Services, such as roadmaps, resources, comments, and profile details.
• Communications. Information you provide when you contact us, respond to surveys, or send us feedback.

Information we receive from Google

If you choose to sign in with Google, Google shares certain information with us according to your Google account settings and the permissions you grant. We request only the following basic scopes:

• openid— a unique identifier for your Google account, used to authenticate you.
• email— your primary Google account email address and whether it has been verified.
• profile— your name and profile picture, if you have made them available.

We do not request access to your Gmail, Google Drive, Google Calendar, Contacts, or any other Google service data, and we never receive your Google password.

Information collected automatically

• Usage and device information. Pages visited, referring URLs, approximate location derived from your IP address, browser type, operating system, and device type. We use Vercel Web Analytics, which collects aggregated, privacy-preserving analytics without using cookies to track you across sites.
• Log data. Our servers automatically record technical information such as IP address, request timestamps, and error logs to operate and secure the Services.
• Cookies and local storage. See Section 6 below.

2. How we use your information

We use the information we collect to:

• Create and authenticate your account and keep you signed in securely;
• Provide, operate, maintain, and improve the Services;
• Display your name and profile picture within your account and, where you choose, to other users;
• Manage the waitlist and send you product updates, early-access invitations, and service announcements;
• Respond to your requests, questions, and feedback;
• Monitor and analyze usage trends to improve the user experience;
• Detect, investigate, and prevent fraud, abuse, security incidents, and other harmful activity;
• Comply with legal obligations and enforce our Terms of Use.

You can unsubscribe from marketing emails at any time using the link in any such email. We may still send you transactional or service-related messages.

3. Google user data

Specifically:

• We use Google user data only to authenticate you and to provide and personalize user-facing features of the Services, such as your account and profile.
• We do not sell Google user data, and we do not use or transfer it for serving advertisements, including retargeting, personalized, or interest-based advertising.
• We do not use Google user data to determine creditworthiness or for lending purposes.
• We do not use Google user data to develop, improve, or train generalized artificial intelligence or machine learning models.
• We do not allow humans to read Google user data unless we have your affirmative consent, it is necessary for security purposes (such as investigating abuse), it is required to comply with applicable law, or the data has been aggregated and anonymized for internal operations.
• We transfer Google user data to third parties only as necessary to provide the Services (for example, to our hosting provider), to comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to you.

You can revoke ForQ’s access to your Google account at any time from your Google Account connections page. Revoking access will prevent you from signing in with Google but will not automatically delete data we have already stored; see Section 8 to request deletion.

4. How we share your information

We do not sell or rent your personal information. We share information only in the following circumstances:

• Service providers. With vendors that process data on our behalf under contractual confidentiality and data-protection obligations, including hosting and analytics (Vercel) and email delivery and waitlist management (Resend).
• Other users. Content you publish, along with your name and profile picture, may be visible to other users as part of the Services.
• Legal requirements. When we believe in good faith that disclosure is required by law, subpoena, or other legal process, or is necessary to protect the rights, property, or safety of ForQ, our users, or the public.
• Business transfers. In connection with a merger, acquisition, financing, reorganization, or sale of all or part of our business, subject to this Privacy Policy.
• With your consent. In any other case, only with your permission.

5. Data retention

We retain personal information for as long as your account is active or as needed to provide the Services. Waitlist information is retained until the Services launch to you or until you ask us to remove it. When you delete your account, we delete or anonymize your personal information, including data received from Google, within 30 days, except where we must retain it to comply with legal obligations, resolve disputes, or enforce our agreements. Residual copies in backups are overwritten in the ordinary course.

6. Cookies and similar technologies

We use a small number of cookies and browser storage items that are necessary for the Services to work:

• Authentication cookies. A secure, HTTP-only session cookie keeps you signed in, and a CSRF token protects your account against cross-site request forgery.
• Preferences. Local storage remembers your theme (light or dark) and your cookie-notice choice.
• Waitlist state. Cookies store a random device identifier and remember that you have already joined the waitlist, to prevent duplicate or abusive sign-ups.

We do not use third-party advertising cookies. You can block or delete cookies through your browser settings, but doing so may prevent you from signing in.

7. Security

We use industry-standard technical and organizational safeguards to protect your information, including encryption in transit (TLS), short-lived access tokens, HTTP-only and secure cookies, and access controls limiting who can access personal data. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. If we learn of a security breach affecting your personal information, we will notify you as required by applicable law.

8. Your rights and choices

Depending on where you live, you may have the right to:

• Access the personal information we hold about you and receive a copy of it;
• Correct inaccurate or incomplete information;
• Delete your personal information and your account;
• Object to or restrict certain processing, or withdraw consent where processing is based on consent;
• Receive your information in a portable format;
• Opt out of marketing communications.

To exercise any of these rights, email us at hello@noderhq.com. We will verify your request and respond within the time required by applicable law (generally within 30 days). We will not discriminate against you for exercising your rights.

European Economic Area, United Kingdom, and Switzerland

If you are in the EEA, UK, or Switzerland, we process your personal information on the following legal bases: to perform our contract with you (providing the Services), our legitimate interests (securing and improving the Services), your consent (for example, marketing emails, which you may withdraw at any time), and compliance with legal obligations. You also have the right to lodge a complaint with your local data protection authority.

California residents

Under the California Consumer Privacy Act (CCPA), as amended, you have the right to know, delete, and correct personal information, and to opt out of the sale or sharing of personal information. We do not sell or “share” personal information as those terms are defined under California law.

9. International data transfers

We and our service providers may process your information in the United States and other countries whose data protection laws may differ from those of your country. Where required, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses to protect transferred data.

10. Children’s privacy

The Services are not directed to children under 13 (or under 16 in the EEA and UK), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will delete it.

11. Third-party links

The Services may link to third-party websites and resources we do not control. This Privacy Policy does not apply to them, and we encourage you to review their privacy policies.

12. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Services before the changes take effect. The “Last updated” date at the top shows when this policy was last revised.

13. Contact us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at:

ForQ Inc.
Email: hello@noderhq.com