Privacy & Security
Forward 360 · Effective 2026-04-24
What we collect
Forward 360 is an invitation-only private network. When you inquire about membership we collect your name, email, and a short note describing your interest. When you onboard we also collect identifying information required for financial engagements — legal name, address, phone, date of birth, Social Security number, and driver's license — together with the data you enter into your Playbook (Life Design, Document Hub, Investment GPS, and Manifesto).
How it is stored
Sensitive personal information is encrypted at the database column level using AES-256 via PostgreSQL's pgcryptoextension. The encryption key is held in Supabase Vault and is never exposed to our application servers. As an added layer of protection, your records and uploaded documents are also stored on Amazon S3 — encrypted at rest and kept separate from the application database. Access to your record is restricted by row-level security — our database refuses to return another member's data even if our application code contains a bug.
Who can see your information
You — always. A small number of Forward 360 administrators may review your Playbook to provide guidance and coordinate with you; those reviews are recorded in an audit log. We do not sell your data, and we do not share it with third parties except as strictly required to operate the service (for example, our hosting providers and our transactional email provider, which only handle encrypted blobs or minimal routing metadata).
Your rights
You may request an export of your Playbook, correction of any stored information, or deletion of your account at any time by emailing privacy@forward360.io. Deletion is permanent and cannot be undone.
Security practices
Our application runs under TLS with strict transport security enabled. Session cookies are HttpOnly and scoped to our domain. Administrator privileges are bound to identity provider claims, not to flags in our own database. We enforce password complexity and do not accept public signups — every member joins through a verified invitation.
Questions
For anything related to this policy, email privacy@forward360.io.