SupplyForge

Privacy Policy

Last updated: May 21, 2026

This Privacy Policy describes how NKB, Inc., a Delaware corporation (“NKB,” “we,” “us,” or “our”), collects, uses, and discloses personal information in connection with the Forge Command application and related services (the “Service”).

1. Information We Collect

When you use the Service, we collect the following categories of information:

  • Account information — name, email address, and authentication credentials that you provide when creating an account or signing in.
  • Business data you import — including contacts, organizations, products, deals, calls, emails, calendar events, tasks, documents, and financial records that you choose to bring into the Service from connected providers.
  • Connected-account data — when you authorize the Service to access third-party platforms (QuickBooks Online, Google Workspace, Amazon Selling Partner, Plaid, OpenPhone / Quo, and others), we receive data from those platforms strictly as needed to provide the Service.
  • Usage data — log data such as IP addresses, browser and device information, pages visited, and timestamps, collected to operate, secure, and improve the Service.

2. How We Use Information

We use personal information to:

  • provide, maintain, and improve the Service;
  • sync, organize, and surface your business data across connected providers;
  • authenticate you and secure your account;
  • communicate with you about service-related matters, including updates and security alerts;
  • comply with legal obligations and enforce our agreements; and
  • detect, investigate, and prevent fraud, abuse, and other harmful activity.

We do not sell personal information. We do not share Intuit data obtained through the QuickBooks API with any party other than the customer that authorized us to access it.

3. Sharing of Information

We share personal information only as described in this Privacy Policy:

  • Subprocessors. We use the following third-party services to operate the Service. Each subprocessor processes information only as needed to deliver its function:
    • Intuit (QuickBooks Online) — accounting and finance sync
    • Google (Gmail and Calendar) — email and calendar integration
    • Amazon Web Services — application hosting and storage
    • Railway — application hosting
    • Vercel — frontend hosting
    • Amazon Selling Partner API — Amazon seller data integration
    • Plaid — bank and credit-card transaction integration
    • OpenPhone / Quo — telephony and call transcription
    • Anthropic — AI-assisted text features (for non-financial data only)
    • HubSpot — outbound contact mirroring
    • Slack — internal notifications
  • Legal compliance. We may disclose information if required by law, subpoena, court order, or to protect the safety, rights, or property of NKB, our users, or others.
  • Business transfers. If NKB is involved in a merger, acquisition, or sale of assets, information may be transferred subject to standard confidentiality obligations.

4. AI and Automated Processing

Certain Service features use large language models (currently Anthropic’s Claude) to summarize, draft, or organize text such as email signatures, call transcripts, and outreach drafts. Financial data obtained via the QuickBooks Online API and the Amazon Selling Partner API is processed by deterministic code only and is never sent to a language model.

5. Data Security

We use industry-standard safeguards including HTTPS in transit, encryption of OAuth refresh tokens at rest, role-based access control, and least-privilege service credentials. No security control is perfect; you use the Service at your own risk and are responsible for the security of your account credentials.

6. Data Retention

We retain personal information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your data by emailing support@nkbluv.com. Some data may persist in backups for a limited period after deletion.

7. Your Rights

Depending on your jurisdiction (e.g., the California Consumer Privacy Act, the EU General Data Protection Regulation), you may have rights to access, correct, delete, or port your personal information, and to object to or restrict certain processing. You may exercise these rights by contacting us at support@nkbluv.com. We will not discriminate against you for exercising any of these rights.

8. International Transfers

The Service is operated from the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States, which may have different data-protection laws than your home jurisdiction.

9. Children

The Service is not directed to children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided personal information to us, please contact us so we can delete it.

10. Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by updating the “Last updated” date above and, where appropriate, by an in-app notification.

11. Contact

Questions about this Privacy Policy or our data practices may be directed to NKB, Inc. at support@nkbluv.com.