Privacy Policy

Last updated: August 13, 2025

This Privacy Policy explains how Forerunner AGI, Inc. (“Forerunner,” “we,” “our,” or “us”) collects, uses, discloses, and safeguards information in connection with our websites, applications, AI-powered tools, marketplace, and other online services (collectively, the “Services”). By accessing or using the Services, you agree to this Privacy Policy and our Terms & Conditions.

1. Information We Collect

Information you provide directly

Account information — name, email address, phone number, mailing address, and login credentials when you create an account.
Profile and listing information — photographs, descriptions, pricing, and other details you submit when creating marketplace listings or completing your profile.
Transaction information — purchase and sale details, payment method identifiers (processed by our third-party payment providers; we do not store full payment card numbers), billing and shipping addresses, and transaction history.
Communications — messages you send through the Services, customer support inquiries, and feedback you provide.
Identity verification — government-issued identification or other documentation you provide for verification purposes, where required for high-value transactions.

Information collected automatically

Device and usage data — IP address, browser type and version, operating system, device identifiers, pages visited, referring and exit pages, timestamps, click patterns, and general interaction data.
Location data — approximate geographic location derived from your IP address. We do not collect precise GPS location unless you explicitly grant permission through your device settings.
3D and spatial data — when you use our 3D inspection, AR preview, or spatial rendering features, we may collect device sensor data, camera data, and spatial mapping information necessary to provide these features. This data is processed to render 3D visualizations and is not used for biometric identification purposes.

Information from third parties

Authentication providers — if you sign in via a third-party service (e.g., Google, Apple), we receive your name, email, and profile picture as permitted by that provider.
Analytics and advertising partners — we may receive aggregated or pseudonymized data from analytics providers to help us understand usage patterns and improve the Services.

2. How We Use Information

We use the information we collect to:

Provide, operate, maintain, and improve the Services.
Process transactions, send transaction confirmations, and provide customer support.
Personalize your experience, including AI-powered search results, recommendations, and valuations.
Train, develop, and improve our AI and machine learning models, including models used for asset valuation, condition analysis, natural-language search, image processing, and 3D rendering.
Send you technical notices, security alerts, and administrative messages.
Send marketing and promotional communications where permitted by law (you can opt out at any time — see “Your Choices” below).
Detect, prevent, and respond to fraud, abuse, security incidents, and illegal activity.
Comply with legal, regulatory, and contractual obligations.
Enforce our Terms & Conditions and protect the rights and safety of Forerunner, users, and others.

3. AI and Automated Decision-Making

The Services use artificial intelligence and machine learning to provide features such as automated asset valuation, condition analysis, image generation, natural-language search, and personalized recommendations.

How AI processes your data. When you use AI Features, your inputs (including images, text, and listing data) are processed by our AI models to generate outputs. These inputs may be used to improve model performance, unless you opt out where this option is available.
No solely automated high-impact decisions. We do not make decisions that produce legal effects or similarly significant effects on you based solely on automated processing. Where AI outputs inform a significant decision (e.g., listing approval), a human review process is available.
Your rights. Depending on your jurisdiction, you may have the right to obtain information about the logic involved in automated processing, to contest automated decisions, and to request human review. See the jurisdiction-specific sections below for details.

4. How We Share Information

Other users. When you create a listing or engage in a transaction, certain information (such as your display name, listing details, and transaction-related communications) is shared with other users as necessary to facilitate the marketplace.
Service providers. We share information with trusted third-party service providers who perform services on our behalf, including cloud hosting (Vercel), payment processing, mapping services (Mapbox), analytics, email delivery, customer support, and AI model infrastructure. These providers are contractually obligated to use your information only as necessary to provide services to us.
Affiliates. We may share information within Forerunner and our corporate affiliates in accordance with this Policy.
Business transfers. In connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred to the acquiring or surviving entity. We will notify you of any such transfer and any choices you may have regarding your information.
Legal compliance and safety. We may disclose information when we believe in good faith that disclosure is necessary to: comply with applicable law, regulation, legal process, or government request; enforce our Terms; protect the rights, property, or safety of Forerunner, our users, or the public; or detect, prevent, or address fraud, security, or technical issues.
With your consent. We may share information with third parties when you direct us to do so or provide your consent.

5. Cookies and Similar Technologies

We and our service providers use cookies, web beacons, pixels, and similar technologies to operate the Services, remember your preferences, understand usage patterns, measure performance, and support marketing.

Essential cookies are required for the Services to function and cannot be disabled.
Analytics cookies help us understand how the Services are used. We use privacy-focused analytics tools where possible.
Preference cookies remember your settings and choices (e.g., language, locale).

You can manage cookies through your browser settings. In jurisdictions that require consent for non-essential cookies (including the EU/EEA), we will obtain your consent before placing such cookies. Some features may not function properly without certain cookies.

6. Data Retention

We retain personal information for as long as reasonably necessary to provide the Services, maintain your account, fulfill our legal and contractual obligations, resolve disputes, enforce our agreements, and for our legitimate business purposes (including AI model improvement). When information is no longer needed for any of these purposes, we will delete or anonymize it. Specific retention periods vary based on the type of data and the purpose of processing.

7. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit and at rest, access controls, regular security assessments, and security headers enforced at the infrastructure level. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. International Data Transfers

Forerunner is based in the United States, and your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. These countries may have data protection laws that differ from those of your country of residence.

Where we transfer personal data from the EEA, UK, Switzerland, Japan, or South Korea to countries that have not been deemed to provide an adequate level of data protection, we rely on appropriate safeguards, including:

Standard Contractual Clauses (SCCs) approved by the European Commission.
Supplementary measures where necessary based on transfer impact assessments.
For transfers from Japan: compliance with APPI requirements for cross-border transfers, including contractual safeguards and, where applicable, reliance on adequacy determinations by the Personal Information Protection Commission.
For transfers from South Korea: compliance with PIPA requirements, including obtaining consent where required and ensuring the receiving party maintains an equivalent level of data protection.

9. Your Choices and Rights

All users

Account information. You may update or correct your account information at any time by logging into your account or contacting us at go@forerunner.ai.
Marketing communications. You may opt out of marketing emails by following the unsubscribe instructions in our messages or contacting us. We may still send non-promotional communications such as transactional confirmations and important service notices.
Cookies. You can manage cookie preferences through your browser settings.
Do Not Track. Some browsers support “Do Not Track” signals. At this time, we do not respond to Do Not Track signals, but you can manage tracking through your browser settings and by opting out of third-party advertising networks directly with those providers.

10. United States — State Privacy Rights

California (CCPA / CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act:

Right to know — what personal information we collect, use, disclose, and sell/share.
Right to access — a copy of the personal information we hold about you.
Right to delete — request deletion of your personal information, subject to exceptions.
Right to correct — request correction of inaccurate personal information.
Right to opt out of sale/sharing — we do not sell personal information. We do not share personal information for cross-context behavioral advertising.
Right to non-discrimination — we will not discriminate against you for exercising your rights.
Right to limit use of sensitive personal information — to the extent we process sensitive personal information, you may request that we limit its use to what is necessary to provide the Services.

To exercise these rights, contact us at go@forerunner.ai. We will verify your identity before processing your request. You may also designate an authorized agent to make requests on your behalf.

Other U.S. states

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and other states with applicable privacy laws may have similar rights to access, delete, correct, and opt out. Contact us at go@forerunner.ai to exercise your rights under applicable state law.

11. European Economic Area, United Kingdom, and Switzerland (GDPR)

If you are located in the EEA, UK, or Switzerland, the General Data Protection Regulation (GDPR) and applicable local implementing legislation apply to our processing of your personal data. This section provides additional information required under GDPR.

Data controller

Forerunner AGI, Inc. is the data controller for personal data processed in connection with the Services. Contact: go@forerunner.ai.

Legal bases for processing

We process your personal data on the following legal bases:

Contract performance — processing necessary to provide the Services, manage your account, and fulfill transactions (Art. 6(1)(b) GDPR).
Legitimate interests — processing necessary for our legitimate interests (e.g., fraud prevention, service improvement, AI model development, security, and analytics), provided these interests are not overridden by your rights (Art. 6(1)(f) GDPR).
Consent — where you have given consent for specific processing activities, such as marketing communications or non-essential cookies (Art. 6(1)(a) GDPR). You may withdraw consent at any time without affecting the lawfulness of processing performed prior to withdrawal.
Legal obligation — processing necessary to comply with applicable laws and regulations (Art. 6(1)(c) GDPR).

Your rights under GDPR

You have the right to:

Access your personal data and receive a copy.
Rectify inaccurate or incomplete personal data.
Erase your personal data (“right to be forgotten”), subject to legal exceptions.
Restrict processing of your personal data in certain circumstances.
Data portability — receive your personal data in a structured, commonly used, machine-readable format.
Object to processing based on legitimate interests, including profiling.
Not be subject to solely automated decision-making that produces legal or similarly significant effects.
Withdraw consent at any time where processing is based on consent.
Lodge a complaint with your local supervisory authority (e.g., CNIL in France, BfDI in Germany, ICO in the UK).

To exercise your rights, contact us at go@forerunner.ai. We will respond within 30 days (or such longer period as permitted by law).

12. Japan (APPI)

If you are located in Japan, the Act on the Protection of Personal Information (“APPI”) applies to our handling of your personal information. In addition to the rights described above:

You have the right to request disclosure, correction, addition, deletion, cessation of use, erasure, or cessation of third-party provision of your retained personal data.
We will specify the purpose of use when acquiring personal information and will not use it beyond the scope necessary to achieve that purpose without your consent.
Cross-border transfers of personal data are conducted in compliance with APPI requirements, including providing you with information about the data protection regime in the recipient country and implementing appropriate safeguards.
We will handle personal information of deceased individuals in accordance with applicable law and our policies.

To exercise your rights or make inquiries, contact us at go@forerunner.ai.

13. South Korea (PIPA)

If you are located in South Korea, the Personal Information Protection Act (“PIPA”) applies to our processing of your personal information. In addition to the rights described above:

You have the right to access, correct, delete, and suspend processing of your personal information.
We will collect and process your personal information only for the purposes specified at the time of collection and will obtain your consent where required by PIPA before processing.
We will promptly destroy personal information when it is no longer necessary for the purpose for which it was collected, when the retention period has expired, or when you withdraw consent, unless retention is required by other laws.
Cross-border transfers of personal information to overseas third parties will be conducted only with your consent or as otherwise permitted by PIPA, and we will provide you with details of the recipient, the purpose of the transfer, and the items of information transferred.
In the event of a data breach involving your personal information, we will notify you and the Personal Information Protection Commission without delay as required by law.

Personal information processing officer

Inquiries and complaints related to the processing of personal information of South Korean users may be directed to: go@forerunner.ai.

14. Children’s Privacy

The Services are not directed to individuals under 18 years of age (or the age of legal majority in the applicable jurisdiction). We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child, we will take steps to delete it promptly. If you believe we have inadvertently collected information from a child, please contact us at go@forerunner.ai.

15. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority without undue delay and, where required by law, within 72 hours. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify affected individuals without undue delay, in accordance with applicable law (including GDPR Art. 33–34, APPI, PIPA, and applicable U.S. state breach notification laws).

16. Third-Party Links and Services

The Services may link to third-party websites or services not controlled by Forerunner. Their privacy practices are governed by their own policies. We encourage you to review those policies before providing any personal information. Forerunner is not responsible for the privacy practices of third parties.

17. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date and provide additional notice where required by law (e.g., by email, in-app notification, or prominent notice on the Services). Where required by applicable law (including GDPR and PIPA), we will obtain your consent before material changes take effect. Your continued use of the Services after changes become effective constitutes acceptance of the updated Privacy Policy, except where consent is required.

18. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, contact us at:

Forerunner AGI, Inc.
Email: go@forerunner.ai
San Francisco, California, United States

For EU/EEA residents, you also have the right to lodge a complaint with your local data protection authority. For South Korean residents, you may contact the Personal Information Protection Commission (PIPC) or the Korea Internet & Security Agency (KISA).

Effective as of August 13, 2025

This document is provided for informational purposes and does not constitute legal advice. Forerunner recommends that users consult independent legal counsel for matters involving significant legal exposure.