Privacy Policy
Effective: June 4, 2026
1. Overview
Fortynine and a Half Labs, LLC ("Company," "we," "us," or "our") operates the FORESCORE platform, including the website at forescore.ai and associated API services (collectively, the "Service"). This Privacy Policy describes how we collect, use, disclose, and protect information in connection with the Service.
By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree, you must discontinue use of the Service immediately.
2. Information We Collect
2.1 Information You Provide
When you request API access or otherwise contact us, we collect:
- Name and job title
- Organization or employer name
- Work email address
- Geographic region or states of interest
- Tier or plan interest
- Any other information you voluntarily provide in correspondence
2.2 API Usage Data
When you use the API, we automatically collect:
- API request logs, including endpoint called, timestamp, and response code
- IP addresses and approximate geographic location derived therefrom
- Query parameters (e.g., ZIP codes submitted for lookup)
- API key identifiers (not the key value itself)
- Rate limit consumption and usage volume
2.3 Automatically Collected Technical Data
When you visit our website, we may collect:
- Browser type and version
- Operating system
- Referring URL
- Pages visited and time spent
- Device identifiers
2.4 Information We Do Not Collect
We do not collect payment card numbers or banking information directly. We do not knowingly collect information from individuals under 18 years of age. We do not collect sensitive personal information such as health data, government identification numbers, or biometric data.
3. How We Use Information
We use the information we collect to:
- Provision, operate, maintain, and improve the Service
- Process and respond to API access requests
- Verify your email address when you sign up for API access
- Issue and manage API keys
- Monitor API usage for billing, rate limiting, and abuse prevention
- Send transactional communications (e.g., access provisioning, service notices)
- Respond to inquiries and provide customer support
- Enforce our Terms of Service and other agreements
- Comply with legal obligations
- Detect, investigate, and prevent fraudulent or unauthorized activity
We do not sell your personal information to third parties. We do not use your information for behavioral advertising or share it with advertising networks.
4. Legal Basis for Processing (EEA/UK Users)
If you are located in the European Economic Area or United Kingdom, our legal basis for processing your personal data is:
- Contract performance — processing necessary to provide the Service you have requested
- Legitimate interests — operating and securing the Service, preventing abuse, and improving our products
- Legal obligation — complying with applicable law
- Consent — where we have obtained your explicit consent for a specific purpose
5. Disclosure of Information
We may disclose your information only in the following circumstances:
- Service providers: We engage third-party vendors (e.g., cloud hosting, email delivery, analytics) who process data on our behalf under written data processing agreements. These vendors are prohibited from using your data for their own purposes.
- Legal process: We may disclose information when required by law, subpoena, court order, or government authority, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
- Business transfers: If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email or prominent notice on the Service before your information becomes subject to a different privacy policy.
- Consent: We may share your information with third parties when you have given us explicit consent to do so.
We do not share, sell, rent, or trade your personal information with any third party for their own marketing or commercial purposes.
6. Data Retention
We retain personal information for as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by law. Specifically:
- Access request form submissions are retained for a maximum of 3 years from the date of submission or last interaction
- API usage logs are retained for a maximum of 24 months
- Account and billing records are retained for 7 years to comply with applicable financial record-keeping requirements
Upon expiration of the applicable retention period, we will securely delete or anonymize your information.
7. Data Security
We implement and maintain reasonable technical and organizational measures designed to protect your information against unauthorized access, disclosure, alteration, or destruction. These measures include encrypted data transmission (TLS), access controls, and regular security reviews.
However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information. You are responsible for maintaining the confidentiality of your API keys. If you believe your API key has been compromised, you must notify us immediately at [email protected].
8. Your Rights and Choices
Depending on your jurisdiction, you may have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your personal information, subject to legal retention obligations
- Portability: Request transfer of your personal information in a machine-readable format
- Objection: Object to processing of your information based on legitimate interests
- Restriction: Request restriction of processing in certain circumstances
- Withdrawal of consent: Where processing is based on consent, withdraw that consent at any time
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. We may require verification of your identity before processing your request.
If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA). We do not sell personal information as defined under the CCPA.
9. Cookies and Tracking
Our website may use cookies and similar tracking technologies for session management and basic analytics. We do not use third-party advertising cookies. You may configure your browser to refuse cookies; however, some features of the Service may not function correctly if cookies are disabled.
10. Third-Party Links
The Service may contain links to third-party websites. This Privacy Policy does not apply to those sites. We are not responsible for the privacy practices or content of any third-party site. We encourage you to review the privacy policies of any third-party site you visit.
11. International Data Transfers
Our servers are located in the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction. By using the Service, you consent to this transfer. Where required by applicable law, we implement appropriate safeguards (such as Standard Contractual Clauses) for international transfers.
12. Changes to This Policy
We reserve the right to modify this Privacy Policy at any time. We will notify you of material changes by posting the updated policy on this page with a revised effective date, and by sending notice to the email address associated with your account where feasible. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the revised policy.
13. Contact
If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:
Fortynine and a Half Labs, LLCPrivacy Inquiries
[email protected]