HAIL FORGE AI

Privacy Policy

Effective 2026-10-16

Hail Forge AI is operated by American Hail Team LLC under the trade name Hail Forge AI. This policy describes the information the Hail Forge AI website and apps use. Questions: support@hailforgeai.com.

Hail Forge AI is intended for people aged 16 and older.

Your choices

Never send passwords, recovery codes or payment-card details. Signing out, removing the app or changing Working as does not delete your account.

Information used to provide the service

Account information includes your name, email address, primary phone number, account identifier and sign-in information. Full name and a primary phone number are required when you set up your profile; the email address comes from your authenticated account. If you choose Apple or Google sign-in, that provider takes part in signing you in. Additional contact numbers, addresses and other profile or business details are optional where those fields are offered. Optional profile details you provide may include tax-related details.

Company and Vehicle information includes Company membership, Job Sites, Vehicle VINs and details, work notes, assignments, estimate drafts and documents, and photos you choose to add. Work-and-pay and revenue records may contain financial information used for bookkeeping. Recording a payment as paid does not itself transfer money.

When purchase features are enabled, Hail Forge AI uses purchase information to verify purchases, connect them to the correct account and Estimate Request, and reconcile their status. This includes product and transaction identifiers, Google Play purchase tokens, account-binding identifiers, and relevant purchase, refund or revocation information. Payment is separate from submitting an Estimate Request and being accepted and queued.

Sessions, preferences, saved drafts, photos and pending-operation records may be stored in your browser or on your device so you can continue work and check uncertain outcomes. The iOS app stores its Hail Forge AI session in Keychain; the website and Android app use their configured local session stores. Local work and hosted records have different lifecycles.

How information is used

Information supports signing in, maintaining your profile, tracking Vehicles and Job Sites, showing work in the correct Company, showing authorized work and pay information, preserving request and operation outcomes, providing Support and recovering from errors. Account and security email supports sign-in, recovery and notice of account changes.

We use customer photos and records to provide and support the service, and we keep estimate material as described under Keeping and deleting information. We do not sell customer photos or records or use them for advertising, and we do not currently use them to train AI models.

Who can see information

Records are available according to account, Company, Job Site and role permissions. Removing someone's Company access does not erase work, payment or audit history. Estimate drafts and shared Company records have different access rules. Authorized Hail Forge Support staff may view and correct supported records while providing support, and those actions are recorded under the staff member who took them.

Service providers

Hail Forge AI uses Supabase for authentication and hosted data services, including business records, photos and documents sent through enabled features. Our website is delivered through Cloudflare. Account confirmation, recovery and security email is sent through Supabase Auth using Google's Gmail SMTP service. Apple and Google take part when you choose their sign-in options.

When estimate email is enabled, it is also sent through Google's Gmail SMTP service. For an accepted Estimate Request, our estimates inbox receives the submitting profile's and Company's contact details, the Vehicle details including its VIN and any claim number, the scope, and the Vehicle and paper-scope photos selected for the request. When Support confirms a customer's delivery address, the finished estimate PDFs are emailed to that address.

Apple and Google process in-app purchases through their stores. Hail Forge AI verifies those purchases using the stores' services. For Apple purchases and App Store notifications, our Supabase functions send the Apple-signed transaction or notification data to a Hail Forge AI verification service hosted on Cloudflare, which checks Apple's signatures and certificate status with Apple. Stripe processes web Checkout payments when that feature is enabled. Hail Forge AI receives payment references, amounts, currency and status information needed to verify and reconcile those payments, including relevant refund and dispute information. Payment-card details entered in a store or Stripe Checkout are handled by that payment provider; these Hail Forge AI purchase-verification paths do not ask you to enter card details into Hail Forge AI.

When you choose Google sign-in on iOS, the Google Sign-In SDK's privacy declarations include name, email address, phone number, approximate location, account and device identifiers, other data and usage information. Google identifies app functionality and analytics as purposes for these SDK data categories.

The website includes Cloudflare's performance analytics beacon. Cloudflare describes this service as collecting page-performance and navigation timing metrics. Hosting and analytics requests are separate from the information you deliberately save in Hail Forge AI.

Camera, VIN recognition and photos

VIN recognition uses Apple Vision on iOS and Google ML Kit text recognition on Android. The recognition code processes camera frames on the device. Google states that ML Kit does not send recognition input images or output text to its servers. Its Android SDK sends device and app information, per-installation identifiers, performance metrics and feature-use or error events for diagnostics and usage analytics.

When you use VIN lookup, the apps send the VIN to the U.S. National Highway Traffic Safety Administration's vPIC service to retrieve Vehicle details. This lookup can happen before you save a Vehicle. Hail Forge AI separately sends Vehicle information when you save it and photos when you add or synchronize them through an enabled photo feature.

Photos you add on Android may include location metadata from the source image or camera. The Android app does not remove those location tags; they may be stored and uploaded with the photo.

Turning off a camera or photo permission does not delete information already stored.

Keeping and deleting information

Deleting a personal sign-in account, cancelling a Company workspace and a Company becoming inactive are separate processes. A deletion-request receipt does not mean deletion is complete and does not start a cancellation window by itself.

The signed-in account-deletion page shows the request and cancellation options available for your account. You can also contact Support. A request receipt does not delete the account or start a cancellation period. Starting deletion requires a separate confirmation; the service then shows your exact 30-day cancellation deadline and current status. You can cancel before that deadline. Read the displayed status and contact Support if deletion is blocked.

Cancelling a Company has a separate 30-day restore period. These 30-day windows are not a promise that all Company records or backup copies are erased when a window ends.

Estimates. We are keeping estimate drafts, submitted estimates, revisions and their photos for now, including after a Company is cancelled and its 30-day restore period ends. No final retention period has been set for this material. Company cancellation does not automatically delete it. We may later use estimate material to develop AI-assisted estimating, but we are not doing so now. We will explain any such use and obtain any permissions required before that use starts. Deleting a personal sign-in account follows its own process, which can remove that person's own unsubmitted drafts and minimize their personal information; keeping estimate material does not change that process.

When a saved Estimate Request draft photo is removed or replaced, Hail Forge AI may keep the original and related recovery records. Authorized Hail Forge AI Support can restore a verified copy when the retained original is available and the recovery checks pass. Recovery is not guaranteed. No fixed photo-recovery deadline is currently set, and automatic purging is not running. Account deletion and retained business records follow their separate rules.

Approved inactivity rules (not yet active). Nonpayment, subscription cancellation or inactivity is planned to make Company data dormant or read-only rather than immediately delete it. The approved rules keep full data, including photos, through 12 months. During months 13 to 24 they protect core Company, person, Vehicle, full VIN, status, estimate, assignment, payment and audit records. Optional large files may expire only after warnings, subject to extensions and legal or dispute holds. Ordinary inactive data may be removed after 24 months only after repeated notice. Automatic removal for inactivity is not running today. These planned rules are not a deletion date for estimate material, which is kept as described above.

Shared work and historical records. Shared Company work, delivered estimates and revisions, financial and payment records, and audit or change history are handled separately from personal sign-in information. These records preserve Company work and an accurate history of deliveries, payments and changes. The exact retained fields and retention periods after personal-account or Company deletion have not yet been published. Contact Support about what is kept.

Recovery backups. Existing recovery backups may contain copies of hosted records. Removing information from a live record does not mean that an existing backup has been erased. A fixed backup-deletion schedule has not yet been published.

Questions

Contact support@hailforgeai.com with any question about this policy or your information.