Back to home

Legal

Privacy Policy

Effective date: 9 July 2026 · Applies globally

This Privacy Policy explains how TexForge ("we", "our", or "us") collects, uses, and protects information about you when you use our platform at texforge.dev. We are incorporated in India and comply with both the General Data Protection Regulation (GDPR) for users in the European Economic Area, and the Digital Personal Data Protection Act 2023 (DPDP) for users in India.

1. Who We Are

TexForge is a software product operated by a privately held team incorporated in India. We build collaborative LaTeX and Markdown document tooling. TexForge is not a HIPAA-covered entity — we do not store, process, or transmit Protected Health Information (PHI) and are not marketed for use in clinical or healthcare contexts.

For all privacy inquiries, contact us at admin@yashlabs.dev.

2. Data We Collect

Account information

Name, email address, display name, and hashed password (bcrypt/Argon2). We never store plain-text passwords.

Document content

LaTeX/Markdown source files, compiled PDFs, and document metadata (titles, revision history). This content belongs to you.

Usage and session data

IP address, browser User-Agent, session tokens (hashed), timestamps, and compile job logs. Used for security, rate limiting, and debugging.

Collaboration records

Project membership, invited email addresses, permission levels, and audit logs of project actions.

Payment data

We use Stripe for payment processing. We receive only a Stripe customer ID and subscription status. We never see or store your full card number.

AI interaction data

Prompts you send to ForgeAgent and the responses returned. These are stored against your account and not used to train external models.

3. How We Use Your Data

  • 01Deliver and operate the TexForge platform — compiling documents, managing projects, and enabling collaboration.
  • 02Authenticate your account and maintain session security (JWT refresh-token rotation, IP tracking for anomaly detection).
  • 03Send transactional emails: email verification, password reset, billing receipts. No marketing emails without explicit opt-in.
  • 04Investigate abuse, enforce our Terms & Conditions, and respond to legal requests.
  • 05Improve the platform through anonymised, aggregated usage analytics. We do not sell individual data.

4. Storage & Security

Data is stored on servers in India. We implement industry-standard protections:

  • 01All data in transit is encrypted via TLS 1.2+.
  • 02Passwords are hashed with bcrypt (cost factor 12) before storage.
  • 03Session tokens are rotated on every use (refresh-token rotation) and invalidated on logout.
  • 04Audit logs record all critical account and project actions.
  • 05We perform soft-deletes to allow account recovery within 30 days, after which data is permanently purged.

5. Third-Party Services

We do not sell, rent, or broker your personal data to any third party for advertising purposes.

StripePayment processing. Governed by Stripe's Privacy Policy.
Infrastructure providerCloud hosting and object storage for compiled PDFs.
AI inference providerForgeAgent responses. Prompts are sent to a third-party LLM API; we have a Data Processing Agreement in place and your data is not used for training.

6. Your Rights

Depending on your jurisdiction, you have the following rights regarding your personal data:

Access

Request a copy of the personal data we hold about you.

Rectification

Correct inaccurate or incomplete data.

Erasure

Request permanent deletion of your account and documents.

Portability

Export your documents in LaTeX or PDF format at any time.

Withdraw consent

(DPDP) Withdraw consent for data processing at any time.

Grievance redressal

(DPDP) Raise a complaint with our Grievance Officer within 72 hours of a response SLA.

admin@yashlabs.dev

Email: admin@yashlabs.dev

To exercise any right, email us. We respond within 30 days.

7. Data Retention

We retain your data for as long as your account is active. On account deletion, we perform a soft-delete that allows recovery for 30 calendar days. After that window, all personal data and document content is permanently and irreversibly purged from our systems. Anonymised, aggregated analytics may be retained indefinitely.

8. Cookies

We use an HTTP-only, Secure cookie exclusively to store your session refresh token. We do not use third-party tracking cookies, advertising cookies, or analytics cookies that transmit data to external services. No cookie consent banner is required because we do not use non-essential cookies.

9. Children

TexForge is intended for users aged 13 and older. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal data, contact us immediately at admin@yashlabs.dev and we will delete it promptly.

10. Contact Us

For privacy-related enquiries:

TexForge — Privacy Team

Email: admin@yashlabs.dev

Response SLA: 72 hours for acknowledgement, 30 days for resolution.

11. Changes to This Policy

We may update this policy periodically. When we make material changes, we will update the "Effective date" at the top and, for significant changes, notify you via email. Your continued use of TexForge after a policy update constitutes acceptance of the revised terms.