Our Privacy Policy

PRIVACY POLICY

Starforest

Last Updated: September 29, 2026
Effective Date: September 29, 2026

1. Introduction

This Privacy Policy describes how Starforest Inc. ("Starforest," "we," "us," or "our"), located at 440 N Wolfe Rd, Sunnyvale, CA 94085, collects, uses, stores, and shares information through our website and through Starforest, our product catalog service for AI shopping agents and brands (the "Service").

The Service provides product information collected from retailers' public websites, such as listings, prices, availability, search rank, bestseller rank, estimated sales, and reviews, combined into one record per product. AI

companies access it through an API, an MCP server, a catalog endpoint, or bulk data files. Brands access reports on how AI agents recommend products in their categories.

This policy applies to:

• Visitors to our website

• People who schedule a call with us

• Customers who use the Service, and the people at those companies who use it on their behalf

For privacy inquiries, contact us at: privacy@thestarforest.com

2. Information We Collect

2.1 Information Collected on Our Website

Our website is a marketing page. It does not ask you to create an account or fill in forms. Like most websites, our hosting provider records basic technical information when you visit, such as your IP address, browser type, the pages you view, and the time of your visit. We use this to keep the site running and to understand how it is used.

2.2 Information Collected When You Schedule a Call

The "Schedule a call" button takes you to Calendly, a third-party scheduling service. Calendly collects the name, email address, and any notes you enter, and shares them with us so we can hold the meeting. Calendly's own privacy policy applies to how it handles your data. We keep the details you provide so we can follow up with you about Starforest.

2.3 Information Collected from Customers

If you or your company sign up for the Service, we collect:

• Account details: your name, work email address, company name, and role

• Access credentials: API keys and similar credentials we issue to you

• Billing details: if you pay us, our payment provider collects your payment information. We do not store full card numbers.

• Configuration: the categories, retailers, and settings you choose

2.4 Automatically Collected Information

• Usage data: the requests your systems send to the Service, such as the product searches an agent runs, the time of each request, and how much data was returned

• For brand customers: records of which reports and views people at your company open

• Error logs and performance data for debugging

2.5 Where Our Product Data Comes From

The Service is built from information that retailers publish on their public websites: product listings, prices, availability, and customer reviews. This is information about products, not about the people who visit our website or use the Service.

Public product reviews sometimes include a reviewer's display name. We do not use reviews to identify or profile anyone, and we do not combine them with any other personal data. If you are a reviewer and want a review that includes your name removed from our data, contact privacy@thestarforest.com and we will remove it.

3. How We Use Information

3.1 Core Service Delivery

We use the information above to:

• Provide, run, and secure the Service

• Respond to you when you contact us or schedule a call

• Bill for the Service and prevent abuse of it

• Understand how the Service is used, so we can improve it

• Send service notices, such as changes to this policy or to the Service

• Send occasional updates about Starforest, which you can opt out of at any time

• Comply with the law

3.2 What We Do Not Use Data For

• We do not sell personal information to any third party

• We do not use personal information for advertising or ad targeting

• We do not use one customer's usage data to benefit another customer

• We do not accept payment from brands or retailers in exchange for better placement, rank, or prominence in the Service

4. How We Share Information

4.1 Service Providers

We share information with companies that help us run our business, such as hosting, scheduling (Calendly), email, and payment providers. They may only use your information to provide their services to us.

4.2 Your Company

If you use the Service through your employer's account, the account owner can see your usage.

4.3 Legal and Safety Disclosures

We may disclose information if required to do so by law, regulation, legal process, or governmental request, or when we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Starforest, our users, or the public.

4.4 Change of Ownership

If Starforest is bought by or merged with another company, your information may transfer to the new owner. We would tell you before that happens.

5. Data Storage and Security

Our servers are located in the United States. Data in transit is encrypted using TLS 1.2 or higher, and data at rest is encrypted. Access to personal information is limited to the people at Starforest who need it, and is logged.

No system is completely secure, so we cannot promise that your information will never be accessed without permission. If we learn of a breach that affects you, we will notify you as required by applicable law.

6. Data Retention

• Details from a scheduled call: up to two years after our last contact, unless you become a customer

• Account and billing records: for as long as your account is active, and afterwards for as long as the law requires

• Usage data: up to 24 months in identifiable form. After that we keep only totals that do not identify anyone.

• Website technical logs and error logs: up to 90 days

We may retain data beyond these periods only where required by law, and only for the minimum period required.

7. Your Rights

Depending on where you live, you have the right to:

• Access: request a copy of the personal information we hold about you

• Correction: request correction of inaccurate information

• Deletion: request that we delete your information

• Export: receive your information in a portable, machine-readable format

• Object or restrict: object to, or ask us to limit, how we use your information

• Withdraw consent: where we rely on your consent, withdraw it at any time

To exercise these rights, contact: privacy@thestarforest.com. We will respond within 30 days. We will not treat you differently for making a request.

Every marketing email we send has an unsubscribe link.

8. International Data Transfers

If you are located outside the United States, your information will be transferred to and processed in the United States. For transfers of personal data from the EEA, the UK, or Switzerland, we rely on Standard Contractual Clauses approved by the European Commission, incorporated into our agreements with customers and service providers.

9. Jurisdiction-Specific Disclosures

9.1 European Economic Area and United Kingdom (GDPR)

Our legal bases for processing are: performance of a contract with you or your company; our legitimate interests in running, securing, and improving our business; your consent where we ask for it; and compliance with legal obligations. You may lodge a complaint with your local supervisory authority.

9.2 California (CCPA / CPRA)

Categories of personal information collected: identifiers (names, email addresses), professional information (company and role), commercial information (billing records), and internet or electronic network activity (website and Service usage). We do not sell or share personal information as defined under the CCPA/CPRA. We do not discriminate against any individual for exercising privacy rights.

10. Cookies and Tracking Technologies

Our website uses only the cookies our hosting provider needs to serve the site. We do not use advertising or retargeting pixels. If we add analytics tools later, we will update this policy and, where the law requires it, ask for your consent first.

11. Children's Privacy

Our website and the Service are for businesses. They are not directed at children under the age of 16, and we do not knowingly collect personal information from them. If we become aware that we have collected personal information from a child under 16, we will delete it promptly.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes:

• We will update the "Last Updated" date at the top of this policy

• For significant changes, we will notify customers by email

• Continued use of the Service after changes take effect constitutes acceptance

13. Contact Information

Starforest Inc.
440 N Wolfe Rd
Sunnyvale, CA 94085
United States

Email: privacy@thestarforest.com

We will acknowledge receipt of your inquiry within 5 business days and provide a substantive response within 30 days.