ForeTwin Privacy Notice

Why ForeTwin Processes Data

• Provide account sign-in, ForeTwin ownership, visitor messaging and service workflows.
• Deliver requested notifications and prevent abuse.
• Maintain a security, ownership and fulfillment audit trail.
• Measure aggregate product adoption and visitor-mode performance without storing visitor identity or content.
• Provide AI assistance only when the configured visitor or account workflow uses it.

What Visitors Should Know

When you send a message, ForeTwin stores the name you choose to provide and your message. The ForeTwin owner can read this content. Technical connection data is used for short-lived abuse prevention and is not shown to the owner.

Do not include unnecessary sensitive information. AI features receive only the public ForeTwin context and the message entered into that feature.

What Account Holders Should Know

Your email and sign-in identities are stored on your private internal user-Thing. They are not copied to the ForeTwins you own. Ownership and role links use internal UUIDs.

Account Admin provides an export, correction and anonymization workflow. Anonymization revokes access and retires ForeTwins that have no other owner.

Retention

sessions

Deleted automatically after expiry (normally 24 hours).

auth Challenges

Expired or completed sign-in and signup challenges are deleted after 24 hours.

rate Limits

Expired abuse-prevention counters are deleted after 24 hours.

delivery Logs

Completed email delivery logs are retained for 14 days.

visitor Messages

Visitor messages and handling comments are redacted 30 days after their last handling.

application Messages

External application message payloads are redacted when their delivery availability ends (normally 24 hours). Minimized delivery and acknowledgement metadata is deleted 30 days later.

attachments

Approved paid visitor attachments normally remain for 7-8 days. Deletion runs after the seven-day deadline, with an asynchronous Azure lifecycle fallback. Attachments remain disabled until managed storage controls are approved.

ai Artifacts

Visitor AI conversation content is not persisted. Other approved AI artifacts are retained for no more than 90 days unless a shorter use-specific period applies.

growth Analytics

Minimized aggregate growth events are retained for no more than 90 days. No analytics cookie or visitor attribution identifier is used.

audit Events

Security, ownership, and access audit events are retained for 12 months; direct identifiers are redacted earlier on erasure where possible.

integration Lifecycle

Pseudonymous Store lifecycle events are available for acknowledgement for up to 90 days; link tombstones remain for security and reconciliation.

commerce

The Store keeps statutory transaction records. ForeTwin keeps pseudonymous fulfillment references while entitlements need an audit trail.

Processors

• Microsoft Azure for production application, database and optional object storage hosting.
• Microsoft Graph for transactional email delivery.
• The configured LiteLLM provider for explicitly invoked AI features.
• Authorized ForeTwin Stores for account linking, purchases and entitlement fulfillment.

Your Rights

• Access and export your account data.
• Correct your account name or email address.
• Request anonymization or erasure, subject to statutory retention duties.
• Contact Forewise to exercise rights or challenge processing.

For support, privacy requests and complaints, contact info@forewise.ai and include your internal user-Thing UUID if available. Never send a one-time sign-in code to support.