Privacy Policy

Automate Fast is a service operated by ForgeCraft, Inc. (“ForgeCraft, Inc.”, “we”, “us”, “our”). This policy explains how we handle information in connection with automate-fast.com and our services. The service is provided on an early-access (beta), “AS IS” and “AS AVAILABLE” basis, and this policy is not a warranty, guarantee, or contractual commitment of any kind. By using the site or the service, you agree to this policy.

Our role: service provider, not controller

When we retrieve, process, or store policy data, client data, or carrier credentials in order to deliver the service, we act solely as a service provider and data processor acting on the documented instructions and authorization of our customer (the advisory firm or professional who engages us). The customer is the data controller of that data and of the underlying individuals’ information. We do not determine the purposes of processing, we do not own that data, and we process it only to provide the service.

Customer responsibilities and representations

You represent, warrant, and are solely responsible for ensuring that:

• you are authorized to engage us and to grant us access to the carrier accounts, credentials, and data you provide;
• you have obtained all consents, authorizations, and lawful bases required to share that data and credentials with us and to have us process them;
• your use of the service complies with all laws and your own professional, fiduciary, and regulatory obligations; and
• the credentials and instructions you provide are accurate and that you are permitted to automate access to the relevant carrier portals.

You agree to indemnify and hold ForgeCraft, Inc. harmless from any claim, loss, or liability arising from your breach of these representations, as further described in our Terms of Service.

Information we collect

• Contact details you provide — name, email, company, and anything you share when you book a call or contact us.
• Policy and client data you authorize us to process — inforce IUL policy values such as cash value, index credits, loan balances, and surrender values retrieved from carrier portals.
• Carrier access credentials you provide so we can retrieve data on your behalf.
• Usage data — limited analytics about how the site is used (see “Analytics and cookies”).

How we use information — and what we never do

We use information only to provide, operate, secure, and improve the service; to retrieve and process the data you authorize; and to communicate with you. We do not sell, rent, or share your personal information, policy data, or client data for any third-party’s independent purposes, and we do not use it for advertising. We may create and use aggregated or de-identified information that does not identify you or any individual to operate and improve the service.

Carrier credentials and third-party portals

We access carrier portals only to retrieve the data you authorize and only to deliver the service. Credentials are handled with access controls and encryption in transit and at rest. You may revoke access at any time by contacting us. Carrier portals are operated by third parties; we are not responsible for their availability, accuracy, security practices, or terms, and changes they make may affect or interrupt the service.

Service providers and disclosures

We share information only with vendors that help us run the service (for example, hosting, infrastructure, and analytics providers) under obligations to protect it; when required by law, legal process, or to protect rights and safety; or with your direction. We do not sell personal information.

Analytics and cookies

We use privacy-respecting analytics (PostHog and Vercel Analytics) to understand site usage. These tools may set cookies or collect device and usage information to measure traffic and performance. You can control cookies through your browser settings.

Security — no guarantee

We use reasonable administrative, technical, and physical safeguards designed to protect information. However, no method of transmission or storage is completely secure, and we cannot and do not guarantee absolute security. You provide information and credentials at your own risk, and to the maximum extent permitted by law we disclaim liability for unauthorized access, loss, or alteration of information beyond our reasonable control. Our overall liability is limited as set out in our Terms of Service.

Data retention and deletion

We retain information only as long as needed to provide the service and meet legal obligations, then delete or de-identify it. On a customer’s verified request, we will delete or return customer data in our possession, subject to legal retention requirements.

Individual rights

Because we process policy and client data as a service provider on behalf of our customer, requests by an individual to access, correct, or delete that data should be directed to the customer (the controller), and we will assist the customer as required by law. For information you provided to us directly, you may contact us at the address below.

Jurisdiction and children

The service is operated from, and governed by the laws of, the United States. It is intended for business use by professionals and is not directed to children, and we do not knowingly collect information from children.

Changes

We may update this policy at any time. We will post the updated version here with a new effective date, and continued use of the service constitutes acceptance.

Contact

Questions about this policy? Email support@automate-fast.com.