Privacy Policy
Last updated: June 11, 2026
This Privacy Policy explains how ForwardOS ('we', 'us') collects, uses, discloses, and safeguards personal information when you use our business-for-sale marketplace and related services in Canada and the United Arab Emirates. We are committed to compliance with Canada's PIPEDA (and applicable provincial laws) and the UAE's Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL).
1. Information We Collect
We collect information you provide directly and information generated through your use of the platform:
2. How We Use Information
We use personal information to operate the marketplace, verify users, prevent fraud, match buyers and sellers, process payments, send service communications and (with consent) alerts, and meet legal and regulatory obligations.
We do not sell your personal information.
3. Legal Bases & Consent
We process personal data on the bases of contract performance, legitimate interests (e.g., fraud prevention), legal obligation (e.g., AML/KYC), and consent (e.g., marketing emails and saved-search alerts, which you may withdraw at any time).
4. Sharing & Disclosure
We share information with: service providers (hosting, email, payments, identity verification) under contract; counterparties in a transaction (limited to what is necessary, after NDA where applicable); and authorities where required by law.
5. International Transfers
Data may be processed outside your country of residence (including in the United States, where our database and some processors operate). We apply appropriate safeguards for cross-border transfers as required by PIPEDA and the UAE PDPL.
6. Data Retention
We retain personal data for as long as needed to provide the service and to meet legal, accounting, and AML record-keeping requirements, after which it is deleted or anonymized.
7. Your Rights
Subject to applicable law, you may request access to, correction, or deletion of your personal data, withdraw consent, and object to certain processing. You can do most of this yourself at /account/privacy, or contact privacy@forwardos.ai.
8. EEA/UK Users — GDPR & UK GDPR
If you are in the European Economic Area or the United Kingdom, the GDPR / UK GDPR applies to our processing of your personal data, and the following additional terms apply.
Lawful bases. We process personal data under one or more of: performance of a contract (operating your account and the marketplace); legitimate interests (fraud prevention, security, product improvement); legal obligation (AML/KYC and record-keeping); and consent (analytics, marketing emails, and non-essential cookies — which you can withdraw at any time).
Your GDPR rights. You have the right to access, rectification, erasure, restriction of processing, data portability, and to object to processing. You also have the right not to be subject to solely automated decisions with legal or similarly significant effects; our deal scores are decision-support only and do not by themselves determine outcomes.
We respond to requests within one month (extendable by two further months for complex requests), free of charge in most cases.
Right to complain. You may lodge a complaint with your local supervisory authority (for example, your national Data Protection Authority in the EEA, or the ICO in the UK). We would appreciate the chance to address your concern first.
9. International Data Transfers (GDPR)
Our database and certain processors are located in the United States. Where we transfer personal data from the EEA/UK to a country without an adequacy decision, we rely on appropriate safeguards such as the EU Standard Contractual Clauses (and the UK Addendum) and, where applicable, the EU-U.S. Data Privacy Framework. Contact privacy@forwardos.ai for a copy of the relevant safeguards.
10. Data Protection Officer & Representative
Privacy questions and rights requests can be directed to our Data Protection Officer at privacy@forwardos.ai. Where required, an EU/UK representative will be appointed and named here.
11. Cookies & Consent
We use essential storage to operate the site and, only with your consent, analytics and marketing storage. You can set or change your preferences via the cookie banner or at /account/privacy at any time.
12. Security
We use encryption in transit, hashed credentials, access controls, and audit logging. See our Security page for details.
13. Contact
For privacy questions or to reach our Data Protection Officer, email privacy@forwardos.ai.