Skip to main content
Forepost is built for support and CX leaders. Data trust is the substrate. This page is the plain-English account of what’s stored, where, and for how long.

​
What Forepost stores

Per user:

​
What Forepost does not store

  • Raw ticket data. When you import a CSV, the rows are parsed in your browser. Only the aggregated metrics are sent to Forepost. The CSV file itself is not retained anywhere.
  • Message bodies. Forepost has no access to individual conversations from Intercom/Zendesk/etc., there’s no integration yet. When integrations land, ticket bodies will only be read on demand for source attribution, not bulk-cached.
  • Conversation history. Your Ask Forepost chat sessions are not persisted. Each session is in-memory only.
  • Read receipts or click tracking. Email links use HMAC-signed tokens for unsubscribe; no analytics pixels.
  • Card details or payment info. Beta is free. When billing turns on, payment is handled by a PCI-compliant processor (Stripe) and Forepost never touches card data.

​
Where data is processed

​
Data sent to Anthropic

When a Daily Brief or Board Pack is generated, your eight metrics and team list are included in the system prompt sent to Anthropic’s API. No ticket content. No message bodies. No customer PII beyond what you typed into your team list (typically first names + initials). Anthropic’s data retention policy applies to those calls. For their commercial terms, see anthropic.com/legal/commercial-terms.

​
Cookies & tracking

The Forepost app sets:
  • A Clerk session cookie (essential).
  • A small localStorage entry for the brief cache (essential, performance).
That’s it. No analytics, no advertising trackers, no third-party pixels.

​
Your rights (GDPR)

Forepost users have:
  • Right of access. Email privacy@forepost.ai and we’ll send your data export.
  • Right to rectification. Edit your workspace anytime in Settings. For account-level data (email, name), use the Clerk account portal.
  • Right to erasure. See “Deleting your data” below.
  • Right to data portability. The export is JSON; portable as standard.
  • Right to object & restrict. Email us; we respond within 30 days.

​
Deleting your data

The right-to-erasure path is currently manual.
  1. Email privacy@forepost.ai with subject Account deletion request.
  2. Within 30 days:
    • Your Clerk user is deleted (auth + verified emails).
    • Your workspace, subscription, metrics history, archived briefs, and counters are removed from D1.
    • The browser cache is wiped on the next sign-in attempt (or you can clear it manually).
A formal in-app delete-account flow is on the roadmap.

​
Sub-processors

Each is GDPR-compliant. Full DPA available on request.

​
Contact

privacy@forepost.ai for any privacy or data-handling question. security@forepost.ai for security disclosures.