Privacy Policy
This Privacy Policy explains how MNFST INC — d/b/a Forever Cited ("Forever Cited," "we," "us," or "our") collects, uses, discloses, and protects personal information when you visit forevercited.ai, use our client portal and platform, request a free AI-visibility audit, or engage our services. Forever Cited is a business-to-business service for US professional firms. We do not offer consumer services.
This policy also serves as our Notice at Collection under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, "CCPA").
1. Who We Are and What This Policy Covers
Forever Cited is operated by MNFST INC — d/b/a Forever Cited, a California corporation, [ADDRESS]. This policy covers personal information we process as a business (controller) — for example, information about website visitors, leads, and the individual users at our client firms.
When we process personal information contained in client content or client systems on a client's behalf (for example, data a law firm uploads to our platform), we act as a service provider / processor under our Data Processing Addendum, and the client's own privacy policy governs that data. If you are a client of one of our law-firm customers, contact that firm directly.
2. Categories of Personal Information We Collect
In the last 12 months we have collected the following categories of personal information, described using the categories in the CCPA:
| Category | Examples | Source |
|---|---|---|
| Identifiers | Name, business email address, phone number, firm name, job title, IP address, account username | You; your firm; automatic collection |
| Commercial information | Subscription plan, purchase history, billing records | You; Stripe (our payment processor) |
| Internet or network activity | Pages viewed, referring URLs, device and browser type, interactions with our site, emails, and ads; portal usage logs; error and diagnostic data | Automatic collection (cookies, pixels, server logs, Sentry) |
| Geolocation (coarse) | Approximate location inferred from IP address | Automatic collection |
| Professional information | Firm, practice areas, bar jurisdiction, role, website | You; your firm; public sources |
| Audio/visual & communications | Support chat transcripts (including AI chat), emails, call recordings where permitted and disclosed | You |
| Inferences | Interest in our services, lead quality, product usage patterns | Derived from the above |
| Sensitive personal information | Account login credentials (username + password/MFA factors) | You |
We use sensitive personal information (login credentials) only to authenticate accounts and secure the platform — purposes permitted under CCPA regulations — and we do not use or disclose it to infer characteristics about you. We do not collect Social Security numbers, precise geolocation, biometric data, or health data.
3. How We Use Personal Information
- Provide, operate, and secure the platform and our done-for-you services, including authentication and multi-factor authentication;
- Deliver free AI-visibility audits and respond to inquiries and support requests (including via AI-assisted chat);
- Process payments, invoices, and subscriptions through Stripe;
- Send service, billing, and security communications (via Resend);
- Send marketing communications you can opt out of at any time;
- Measure and improve our website, product, and marketing, including analytics and advertising measurement;
- Detect, investigate, and prevent fraud, abuse, and security incidents (including error tracking via Sentry);
- Comply with law, enforce our Terms of Service, and protect our legal rights.
We do not use personal information for automated decision-making that produces legal or similarly significant effects about you.
4. How We Disclose Personal Information — Including "Sharing"
We do not sell personal information for money.
However, like most websites that use advertising and analytics tools, we use pixels and tags from Google (GA4), Meta (Meta Pixel and Conversions API), and X (X Pixel). These tools transmit identifiers and internet-activity data to those companies for advertising measurement and cross-context behavioral advertising. Under the CCPA, this constitutes "sharing" (and may constitute a "sale" as broadly defined). The categories shared are: identifiers (such as IP address, cookie IDs, and hashed email) and internet or network activity. We share with: Google, Meta Platforms, and X Corp. You can opt out at any time — see Section 7.
Service providers
We disclose personal information to service providers bound by written contracts limiting their use of the data: Supabase (database and authentication), Vercel (hosting), Resend (transactional email), Sentry (error monitoring), Stripe (payments), Google (analytics and workspace tooling), and Anthropic (AI features, including support chat). Details and security commitments are in our DPA.
Other disclosures
- Legal: to comply with law, subpoenas, or lawful requests, or to protect rights, safety, and property;
- Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to this policy;
- With your direction: when you ask us to disclose information to a third party.
We have no actual knowledge that we sell or share the personal information of consumers under 16 years of age.
5. Retention
We keep personal information only as long as reasonably necessary for the purposes described above, then delete or de-identify it. As a general guide:
| Data | Retention |
|---|---|
| Lead and audit-request data | 24 months after last interaction |
| Client account and portal data | Term of the engagement + 90 days, then deleted on request or per contract |
| Billing and tax records | 7 years (legal requirement) |
| Analytics data (GA4) | 14 months |
| Error/diagnostic logs (Sentry) | 90 days |
| Support and chat transcripts | 24 months |
6. Your US State Privacy Rights
Residents of California, Colorado, Connecticut, Delaware, Montana, Oregon, Texas, Utah, Virginia, and other states with comprehensive privacy laws have some or all of the following rights. We extend these rights to all US residents as a single standard:
- Know / Access: confirm whether we process your personal information and receive a copy of it, including (for California residents) the categories collected, sources, purposes, and third parties to whom it was disclosed;
- Correct: fix inaccurate personal information;
- Delete: request deletion, subject to legal exceptions;
- Portability: receive your data in a portable, usable format;
- Opt out of the "sale" or "sharing" of personal information, targeted advertising, and profiling in furtherance of decisions with legal or similarly significant effects (we do not conduct such profiling);
- Limit use of sensitive personal information (we already limit our use to permitted purposes);
- Non-discrimination: we will not discriminate against you for exercising these rights;
- Appeal: if we decline a request and your state provides an appeal right (e.g., Virginia, Colorado, Connecticut, Texas, Oregon, Montana), you may appeal by replying to our decision, and we will respond within the statutory period. If your appeal is denied, you may contact your state Attorney General.
7. How to Exercise Your Rights — Do Not Sell or Share My Personal Information
To exercise access, correction, deletion, or portability rights, email hello@forevercited.ai with the subject "Privacy Rights Request," or write to us at [ADDRESS]. We will respond within 45 days (extendable once by 45 days where permitted, with notice).
Verification: we will verify your identity by matching information you provide against information we hold (for example, confirming control of the email address on file). We do not require an account to submit a request.
Authorized agents: California residents may use an authorized agent; we may require proof of written authorization and direct verification of your identity.
8. Cookies and Tracking
We use strictly necessary, analytics, and advertising cookies and pixels. Details — including named cookies, durations, and opt-out instructions — are in our Cookie Policy. Because there is no industry consensus on "Do Not Track" browser signals, we do not respond to DNT, but we do honor the Global Privacy Control as described above.
9. Children
Our services are for businesses and are not directed to anyone under 18. We do not knowingly collect personal information from anyone under 16, and we do not sell or share the personal information of consumers under 16. If you believe a minor has provided us personal information, contact hello@forevercited.ai and we will delete it.
10. California "Shine the Light"
California Civil Code § 1798.83 permits California residents to request information about disclosure of personal information to third parties for those parties' direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing. To ask questions, email hello@forevercited.ai.
11. Security
We use commercially reasonable technical and organizational safeguards, including encryption in transit (TLS) and at rest, multi-factor authentication, role-based access, and vendor due diligence. No system is perfectly secure; please use a strong, unique password and keep MFA enabled.
12. Where Data Is Processed
We are US-based and our services are directed to the United States. Our service providers process data primarily in the United States.
13. Changes to This Policy
We may update this policy from time to time. We will post the revised version here with a new effective date, and for material changes we will provide additional notice (such as email to account holders). Your continued use of the services after the effective date constitutes acceptance.
14. Contact Us
MNFST INC — d/b/a Forever Cited
[ADDRESS]
Email: hello@forevercited.ai