Privacy Policy

01Introduction & Consent

Forke operates a developer micro-task and bounty platform that connects independent developers with technical projects. By registering an account, linking third-party authentication services, or interacting with our platform, you explicitly consent to the collection, processing, and storage of your personal data as outlined in this policy.

02Information We Collect

03Third-Party Sub-Processors

We integrate with trusted third-party services to deliver key application functionalities. These providers process data in accordance with their own privacy protocols:

• Authentication & Session Management (NextAuth): Handles secure credentials-based login as well as third-party OAuth authentication via GitHub and Google.
• Database Infrastructure (AWS RDS PostgreSQL & Drizzle ORM): Stores user profiles, task details, active claims, and transaction histories securely on Amazon Web Services (AWS) database instances.
• Payment Gateway & Settlements (Razorpay): Processes task bounty deposits, payouts, and UPI settlements. We do not store full credit card numbers or banking secrets on our servers.
• Analytics (Google Analytics 4): Helps us understand aggregate site traffic, page views, and acquisition channels so we can improve the product. Google may set its own cookies and process usage data in accordance with its privacy policy; we do not use it for advertising or to sell your data.

04Storage, Security & Location

Our primary databases are hosted securely on AWS cloud infrastructure located in India to ensure compliance with local server-residency requirements under the DPDP Act 2023.

We implement SSL/TLS encryption for all data in transit, restrict database access to authenticated administrators, and run automated security scanners. However, no internet service is 100% secure, and you are responsible for maintaining the privacy of your account access credentials.

05Data Retention

We retain your personal information for as long as your account is active on Forke. If you delete your account, we will erase or anonymize your personal data within 30 days, except where we are legally required to retain certain records (such as tax invoices, payment settlement audits, or dispute history logs) for up to 5 years under applicable Indian fiscal regulations.

06Cookies & Tracking

Forke uses persistent and session cookies to keep you signed in, preserve your interface theme settings, and analyze traffic performance. You may disable cookies in your web browser, but doing so will prevent you from claiming bounties or accessing private dashboards.

When you first arrive via a tagged or referring link, we store a first-party attribution cookie that records the marketing channel, campaign tags (UTM parameters), and referring website. This helps us understand which channels bring people to Forke and is associated with your account if you sign up. We also use Google Analytics, which sets its own cookies to measure aggregate traffic. We do not use third-party advertising trackers or device fingerprinting, and we do not sell your data.

07Your Privacy Rights

Under India's DPDP Act 2023 and global standards, you possess the following rights regarding your personal data:

• Right to Access & Portability: You may request a copy of the personal data we hold about you in a readable format.
• Right to Rectification: You may request corrections to any inaccurate, outdated, or incomplete personal data.
• Right to Erasure ("Right to be Forgotten"): You can request that we delete your account and associated personal info.
• Right to Withdraw Consent: You may withdraw your consent to process your data at any time, which will result in account closure.