Effective August 16, 2026 · Big One Platforms, Inc. (operating the BigForgeOne / FORGE platform)
FORGE is a defense-logistics software platform operated by Big One Platforms, Inc. (“we,” “us”). This policy describes how we collect, use, and protect information when you use FORGE, our websites, and integrations we provide. Questions: chris@bigforgeone.com.
Account information. Name, work email address, organization, and role, provided when your organization provisions your account.
Customer operational data. Content your organization enters into FORGE — quotes, purchase orders, inventory records, vendor and customer records, documents, and related business data. Your organization owns this data; we process it only to provide the service.
Integration data, including QuickBooks Online. If your organization connects an accounting system such as Intuit QuickBooks Online, we access that system solely on your organization’s behalf and only through the authorization you grant via OAuth. We read vendor, customer, item, and invoice records to keep them synchronized with FORGE, and we write the transactions your organization directs FORGE to create (estimates, invoices, purchase orders, bills, and inventory adjustments). OAuth tokens are stored encrypted (AES-256-GCM) and are never shared with third parties. You can disconnect the integration at any time from within FORGE or from your Intuit account; disconnecting revokes our access. We do not sell, rent, or use QuickBooks data for advertising, profiling, or any purpose other than providing the synchronization your organization configured.
Usage and log data. Standard technical logs (IP address, timestamps, pages and API endpoints accessed) used for security monitoring and operations.
To provide and secure the service, synchronize the systems your organization connects, provide support, meet contractual and legal obligations, and send service communications. We do not sell personal information, and we do not use customer operational or integration data to train models or for advertising.
We share data only with subprocessors necessary to run the service — Amazon Web Services (hosting, including AWS GovCloud for government-facing deployments) and, where your organization has connected it, Intuit (QuickBooks Online API) — and where required by law. Each subprocessor receives only the data required for its function.
Data is encrypted in transit (TLS) and at rest. Integration credentials are additionally envelope-encrypted at the application layer. We retain customer data for the life of the customer relationship and delete or return it on termination, subject to legal retention requirements and contract flow-downs applicable to government contracting records.
Access, correction, and deletion requests for personal information can be made through your organization’s administrator or directly to us at chris@bigforgeone.com. We respond consistent with applicable law.
We will post updates to this page and revise the effective date. Material changes are communicated to organizational administrators.