GDPR and data protection

Existing safeguards

Our Privacy Policy explains collection and use. We use industry-standard encryption and secure US hosting. GDPR does not inherently require EU data residency. International transfers use Article 46 safeguards, including European Commission SCCs, and, where applicable, vendors certified under the EU–US Data Privacy Framework and its UK Extension.

Compliance measures

1. No Google Analytics on signed-in pages.
2. Visitors can consent to homepage analytics cookies.
3. One internal analytics provider supports essential signed-in functionality.
4. No Fork analytics cookies in end-user Studios.
5. Fork users can delete accounts themselves.
6. End Users can delete accounts without contacting us or their Studio owner.
7. Updated disclosures and a GDPR commitment in our Privacy Policy.
8. Builder responsibilities covered in our Terms of Service.

Your responsibilities

Studios are not automatically compliant. Provide terms and a privacy notice for your users; our policies can be linked where appropriate. Fork’s Studio cookies support essential functionality. Your own analytics may require additional consent controls. Please report compliance concerns.

SOC 2 assurance

Pickaxe Inc., the company behind Fork, has completed a SOC 2 Type II examination. Visit our Trust Center for the report’s scope and dates, and to request access.

Business reviews and agreements

Fork is a service of Pickaxe Inc. For a data processing agreement or information for your organisation’s review, contact info@fork.site. A separate data processing agreement applies where agreed in writing.

Contact

Email info@fork.site, or write to Pickaxe Inc., 1388 Haight St Unit #404, San Francisco, CA 94117.