Privacy Policy

Version 808e909a94e1

Effective October 23, 2026. This policy explains how 1HomePlanet, LLC ("1HomePlanet", "we", "us") collects, uses, shares, protects, retains and deletes information in PurchaseForge (the "Service"), including information we receive from Google and Microsoft when you connect a mailbox. PurchaseForge is a business service for processing purchase orders; it is not intended for consumers or for anyone under 18.

Information we collect

Account information: names, work email addresses, hashed passwords, one-time sign-in codes, sign-in history and IP addresses, and a record of each acceptance of our Terms of Service and this policy, with the version accepted.

Mailbox information, with your permission (see "Google user data" and "Microsoft user data" below): incoming email messages, their senders, subjects, dates, bodies and attachments, and the mailbox's email address. We use them to identify purchase orders. For messages that are not orders, we keep only the message identifier, for up to 30 days, so we do not read them twice; we do not store their content. For order emails, we store the message, its attachments and the order we interpret from them.

Business information: your product catalog, the customers you sell to and their order details (which can include names, email addresses, phone numbers and shipping addresses of people at those customers), orders, the corrections and decisions your users make while reviewing orders, and credentials for systems you connect, such as your ERP.

Training records: when your account's data-use setting allows it, each final decision on an order is recorded in a separate training dataset. A record contains the order as our system read it, the order as your team finalized it, the differences between them and the reason for each correction, the catalog as it was at the time, and an encrypted copy of the original email and attachment text.

Technical information: logs of requests, errors and security events. The Service uses only the cookies needed to keep you signed in and protect forms; it does not use advertising or tracking cookies.

How we use information

We use information to provide the Service: to read and interpret incoming orders, check them, present them for review, send accepted orders to your ERP or produce order documents, add status labels in your mailbox if you allow it, send sign-in codes and invitations, support you, and keep the Service secure. We also use it to measure and improve the Service and to train, evaluate and improve the models that serve your account. We use automated processing, including artificial intelligence, to interpret emails; your team reviews the results before orders are accepted, unless you choose automatic commits for orders that pass every check.

AI processing by OpenAI

To extract order details, the Service sends the content of incoming email messages and their attachments (including data from Gmail and Microsoft mailboxes), together with relevant parts of your product catalog, to a large language model provided by OpenAI through its API. The model decides whether each message is a purchase order and extracts its details, such as items, quantities, prices and shipping information. Catalog files you upload are processed the same way to build your catalog. OpenAI acts as our service provider: under its API terms it does not use this data to train its models, and it may keep it for up to 30 days to monitor for abuse before deleting it, unless the law requires longer. We request that OpenAI not store our requests beyond that. We do not send this data to any other AI provider.

De-identification and anonymized data

Before data is used to train models that serve more than one customer, and before any dataset is shared with or sold to a third party, we de-identify it: we remove names of people and companies, email addresses, phone numbers, street addresses and postal codes, account numbers and free-text address fields, replace your account identifier with a code, and never include original emails. De-identified data cannot reasonably be used to identify you, your users, your customers or any individual, and we do not attempt to re-identify it. Subject to the "Google user data" section, we may use, share, license or sell de-identified or aggregated data to third parties, including after your account ends. We do not sell personal information.

Google user data

When you connect a Gmail or Google Workspace mailbox, we request access to read your email messages and settings (gmail.readonly) so we can identify purchase orders, and, only if you opt in to inbox labels, to manage labels (gmail.modify), which we use solely to add and remove PurchaseForge's own status labels. We never send, delete or move email, or mark it read. We store an access token for the mailbox on access-restricted servers so the Service can keep reading new mail until you disconnect it.

PurchaseForge's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically: we use Google user data only to provide and improve the user-facing features of the Service for the account that connected the mailbox, including models personalized to that account. We do not use Google user data, or data derived from it, including de-identified or aggregated data, to develop, improve or train generalized or non-personalized AI or machine-learning models. We do not sell Google user data or data derived from it, use it for advertising, or transfer it to third parties except as necessary to provide or improve those user-facing features (for example to OpenAI for order extraction, and to the other service providers listed below), to comply with applicable law, or as part of a merger, acquisition or sale of assets with notice to you. People at 1HomePlanet do not read Google user data unless you give us permission for specific messages (for example for support), it is necessary for security purposes such as investigating abuse, or it is required to comply with applicable law.

Microsoft user data

When you connect an Outlook or Microsoft 365 mailbox, we request permission to read mail (Mail.Read), read your basic profile (User.Read), keep access while you are not signed in (offline_access) and, only if you opt in to inbox labels, to manage mail (Mail.ReadWrite), which we use solely to add and remove PurchaseForge's own categories. We use and protect this data as described in this policy.

How we share information

We do not sell personal information. We share information only with service providers that process it on our behalf under contract and only to operate the Service: Amazon Web Services (hosting, storage and sending email), OpenAI (extraction of order details from email and attachment content, as described in "AI processing by OpenAI"), and Google and Microsoft (the mailbox access you authorize). We may disclose information if required by law or legal process, to protect the rights, property or safety of our users, the public or 1HomePlanet, or as part of a merger, acquisition or sale of assets. We may share de-identified data as described above.

How we protect information

Data is encrypted in transit between your browser, our servers and our providers. Stored copies of original emails in the training dataset, and integration credentials such as ERP passwords, are encrypted. Mailbox access tokens and other data are stored on servers with restricted access. Sign-in requires a password and a one-time code sent by email. Access to production systems is limited to people who need it. No system is perfectly secure; if a breach affects your information, we will notify you as the law requires.

Retention and deletion

While your account is active, we keep account information, order emails and attachments, orders, review history and training records so the Service can work and improve. Non-order messages are kept only as message identifiers for up to 30 days. Sign-in codes expire within minutes.

If a demo ends without being converted to a paid subscription, we delete the demo's data 30 days after it ends, including stored emails, orders, mailbox access tokens, users who belong to no other account, and training records.

When a paid account ends, we stop reading its mailboxes. Within 90 days, or within 30 days of a deletion request, we delete its identifiable data, including stored emails, orders, mailbox access tokens and training records. De-identified data created under this policy, records of data-use settings and terms acceptance, and records we must keep by law may be retained.

You can disconnect a mailbox at any time from the Service, or revoke our access in your Google Account (myaccount.google.com/permissions) or Microsoft account. We then stop reading it. To ask us to delete data, email support@purchaseforge.com.

Your choices and rights

Account administrators choose whether inbox labels are on and which data-use setting applies to training. Depending on where you live, you may have rights to access, correct, delete or export your personal information, or to object to certain processing. To exercise them, email support@purchaseforge.com; we will verify the request and respond within the time the law requires. Where we process information on behalf of our business customers (for example their customers' contact details in orders), we will refer requests to the customer or help them respond.

International transfers

We store and process data in the United States. If you use the Service from elsewhere, your information is transferred to and processed in the United States.

Changes to this policy

We may update this policy. The version in force and its effective date are shown on this page, and we notify account administrators of material changes before they take effect. Each acceptance of this policy is recorded with the version accepted.

Contact

PurchaseForge is a product of 1HomePlanet, LLC, 645 G Street, Ste 100-501, Anchorage, AK 99501. Questions or requests: support@purchaseforge.com