Foretoken Labs

Privacy Policy

Last updated: June 2026

Foretoken Labs LLC ("we," "us," or "our") operates foretokenlabs.com and the Steel-Manning Workbench application at app.foretokenlabs.com (together, the "Service"). This policy explains what data we collect, how we use it, who we share it with, and your rights.

Information we collect

Account information. When you create an account, we collect your email address via our authentication provider, Supabase.

Documents you submit for analysis. When you use the Service, you submit a document for analysis. That document's content is processed as described in "Document content — processing and retention" below.

Billing information. When you purchase credits, our payment processor, Stripe, handles your payment details directly. We receive and store a record of the transaction (amount, credit pack purchased, timestamp) but never see or store your card details.

Feedback. If you choose to submit feedback about an analysis (ratings or free-text comments), we store your responses.

Usage data. Our servers may log standard technical information such as IP address, browser type, and pages or endpoints accessed. We do not use third-party analytics or tracking cookies.

How we use your information

We use the information above to:

  • Provide and operate the Service, including running your analyses and delivering your reports
  • Manage your account, credit balance, and purchase history
  • Process payments and maintain billing records
  • Respond to support requests and review feedback to improve the Service
  • Maintain the security and reliability of the Service

We do not send unsolicited marketing communications. We will contact you as necessary to operate your account — for example, to send authentication links or purchase receipts. If you subscribe to updates such as a newsletter or product announcements, we will send those communications; you may unsubscribe at any time.

Document content — processing and retention

Sent to Anthropic for processing. To generate your analysis, the content of your document is transmitted to Anthropic (the provider of the Claude AI models we use) via their API. Foretoken Labs uses Anthropic's API under Anthropic's standard commercial terms. Anthropic's own privacy policy and API usage policies govern how Anthropic processes this data — we encourage you to review them if you have questions about Anthropic's practices. Anthropic does not use API data to train its models.

Not stored by Foretoken Labs. Foretoken Labs does not save the content of your document, the intermediate outputs of the analysis pipeline, or your final report to any database or file. When you submit a document, it is held only in the active memory of our servers for as long as it takes to run your analysis — typically a few minutes. It is never written to disk. When your session ends, that memory is cleared automatically. At no point does a copy of your document sit in permanent storage on our systems.

Not used for training. Foretoken Labs does not use the content of documents you submit — or any analysis generated from them — to train, fine-tune, or otherwise develop AI models.

Stored in your browser for convenience. To allow you to navigate away and return to an in-progress or completed analysis, your browser stores session data locally on your device — including your session ID, document name, pipeline status, and the completed analysis result. This data never leaves your device through us; it exists solely in your browser's local storage. The content of your submitted document is not stored in your browser — only the session metadata and the final analysis output are. If you clear your browser's local storage or use a different device, this data will no longer be accessible. Download your PDF report before clearing your browser to avoid losing access to your results.

Your PDF is your copy. The PDF report generated for you is delivered for download. We do not retain a copy after delivery. If you lose your downloaded report, we cannot regenerate or recover it, because the underlying data no longer exists on our systems.

What we retain

Separately from document content, we retain the following for as long as your account is active, and for a reasonable period after as needed for legal, tax, or dispute-resolution purposes:

  • Your account identity (email address, via Supabase)
  • Your credit balance and transaction history
  • Feedback you have submitted

None of the above includes the content of any document you have submitted or any analysis generated from it.

Third-party processors

We use the following services to operate the Service. Each operates under its own privacy policy and terms:

Cookies

The Service uses only the session cookie set by our authentication provider (Supabase) to keep you signed in. We do not use advertising, tracking, or analytics cookies.

Your rights

You may request access to, correction of, or deletion of your account data at any time by emailing hello@foretokenlabs.com. We will respond within 7 days. Because document content is not retained (see above), there is generally nothing to delete on that front beyond your account record and the retained data listed in "What we retain."

If you are in the EU or UK, you have additional rights under GDPR/UK GDPR, including the right to access, correct, port, and erase your data. Contact us at the address above to exercise these rights.

If you are a Virginia resident, you have rights under the Virginia Consumer Data Protection Act (CDPA), including the right to access, correct, delete, and obtain a copy of your personal data. Contact us at the address above to submit a request.

Data security

We use industry-standard measures to protect your data, including encrypted connections (HTTPS) for all traffic and cryptographic signing of generated reports to verify their integrity. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Children's privacy

The Service is not directed to, and we do not knowingly collect personal information from, anyone under the age of 13. If we become aware that we have collected information from a child under 13, we will delete it.

International users

Foretoken Labs is based in the United States, and the third-party processors listed above operate in the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States.

Changes

If we materially change this policy, we will update the date at the top of this page. We will not retroactively reduce your rights without notice.

Contact

hello@foretokenlabs.com