Privacy Policy

01Overview

Forgeborn ("we", "us", or "our") is the controller of the personal data processed through the service. We are committed to handling your data lawfully, transparently, and only as needed to provide and improve the platform.

This policy applies to our website, applications, and related services. It should be read together with our Terms of Service.

02Information we collect

We collect the following categories of information:

• Account data: your email address, password (stored in hashed form), display name, and profile settings such as language and avatar. We show a generated display name, not your real name, and you can change it; we do not use the name or picture from your Google or other sign-in account.
• Content data: the prompts, images, and other Input you submit, and the images, videos, and other Output the service generates for you.
• Usage data: generation history, credit balance and consumption, feature usage, device and browser information, IP address, and log data.
• Billing data: your plan, order and transaction records, and identifiers we receive from Dodo Payments, our Merchant of Record. Your card details and billing address are collected and processed by Dodo Payments, not by us.
• Security and anti-abuse data: a CAPTCHA check at sign-up and sign-in, and — to prevent abuse of free sign-up credits — a device identifier generated by your browser and a one-way hashed (non-reversible) form of your IP address.
• Support data: messages you send us through the contact form or support channels.

03How we use your information

We use your personal data to:

• operate the service, run generations, and maintain your credit balance;
• authenticate you, secure your account, and prevent fraud and abuse;
• process payments and manage your subscription;
• provide customer support and respond to your requests;
• improve reliability, safety, and features, and analyze aggregate usage;
• comply with legal obligations and enforce our terms.

04AI processing of your content

To generate Output, your Input is sent to third-party AI model providers strictly to fulfil your request. We take steps to work with providers that offer appropriate confidentiality and security commitments. We do not use your private Input or Output to train our own models, and we do not sell your content.

Photos of faces that you upload are processed only to create the generation you request. We do not use them for facial recognition, to identify you or anyone else, or to train AI models.

05Automated decisions and profiling

Every prompt and upload is checked automatically before it is generated. The check looks for content our Terms and Acceptable Use Policy do not allow, such as sexual content, content involving minors, and real, identifiable people used without consent. If the check finds such content, the request is blocked. Repeated or serious matches may be reviewed by our team and can lead to limits on, or suspension of, your account.

We use these checks only to keep the service safe and to enforce our terms. We do not use automated decisions or profiling for advertising, pricing, or any other purpose.

If an automated decision affects you, you can ask for a person to review it, explain your point of view, and contest the decision. Email support@forgeborn.ai with the details and we will reply.

06Legal bases for processing

Where data protection laws such as the GDPR or the UK GDPR apply, we process your data on the following bases: performance of our contract with you (to provide the service); our legitimate interests (to secure, maintain, and improve the platform and to prevent fraud and abuse); your consent (where required, for example certain communications); and compliance with legal obligations.

07Sharing and sub-processors

We share personal data only as needed to run the service. Our service providers (sub-processors) work on our instructions and are bound by confidentiality and data protection terms. By category, they are:

• AI model providers, which generate Output from your Input;
• cloud hosting and storage, which run the platform and keep your files;
• email delivery, for sign-in, account and service emails;
• analytics, only if you accept analytics cookies (see our Cookie Notice);
• content moderation, which checks prompts and uploads for content our terms do not allow;
• payment provider (Merchant of Record): Dodo Payments processes payments, taxes, invoices, and refunds for all purchases as an independent controller under its own Privacy Policy (dodopayments.com/legal/privacy-policy);
• authorities or advisors where required by law, or to protect our rights and users.

08Data retention

We keep personal data for as long as your account is active and as needed to provide the service. Generated content in your library is retained until you delete it or close your account, subject to any plan-specific history limits. Billing records are kept for the periods required by law. When data is no longer needed, we delete or anonymize it.

09Security

We use technical and organizational measures such as encryption in transit, access controls, and hashed passwords to protect your data. No method of transmission or storage is completely secure, but we work to protect your information and to respond promptly to any incident.

10International transfers

Our providers may process data in countries other than your own. Where personal data is transferred internationally, we rely on appropriate safeguards, such as standard contractual clauses, to protect it in line with applicable law.

11Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal data; to object to or restrict certain processing; and to withdraw consent at any time, without affecting processing done before. You can manage much of your data from your profile, or email support@forgeborn.ai to exercise these rights. We may ask for information to confirm your identity before we act on a request, and we will tell you if and why we cannot meet it.

You have the right to lodge a complaint with the data protection authority in the country where you live or work, or where you believe your rights were infringed. In the EU and EEA, this is your national data protection authority; in the UK, the Information Commissioner’s Office (ICO); in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC). We would appreciate the chance to address your concern first, so please contact us.

12US state privacy rights

If you live in a US state with a consumer privacy law, such as California, Colorado, Connecticut, Virginia, Texas, or Oregon, you may have the rights below. Some rights apply only in some states, and they are subject to exceptions under those laws.

Sale and sharing: we do not sell your personal information, and we do not share it for cross-context behavioral (targeted) advertising. We do not use advertising or social media tracking pixels. Optional analytics run only if you accept analytics cookies. We do not knowingly sell or share the personal information of anyone under 16.

Global Privacy Control and Do Not Track: optional analytics never load until you click "Accept" in the cookie bar, so a browser that sends a Global Privacy Control (GPC) or Do Not Track signal is not tracked unless you choose to accept. We treat a GPC signal as a valid request to opt out of the sale or sharing of your personal information for that browser. We do not respond to Do Not Track separately, because there is no common standard for it.

To make a request, email support@forgeborn.ai. We will confirm your identity using the email address on your account. You may use an authorized agent; we may ask for proof that they can act for you. If we decline your request, you can appeal by replying to our answer, and we will tell you the outcome of the appeal.

• Know and access: the categories and specific pieces of personal information we have collected, where it came from, why we use it, and who we disclose it to.
• Correction: correct inaccurate personal information.
• Deletion: delete personal information we collected from you.
• Portability: get a copy of your personal information in a usable format.
• Opt out: of the sale or sharing of personal information, of targeted advertising, and of profiling that produces legal or similarly significant effects (we do none of these).
• Sensitive information: photos of faces you upload are used only to create the generation you request, never to identify anyone or to infer characteristics about you.
• Non-discrimination: we will not treat you differently for using these rights.

13Cookies and tracking

We use cookies and similar browser storage (such as local storage) in two groups. Essential cookies are always on because the service can’t work without them: sign-in, your cookie choice, the security check at sign-up and sign-in, secure checkout, and abuse prevention for free sign-up credits. Analytics cookies are optional and are only set after you click "Accept" in the cookie bar.

Analytics: we use Google Analytics and Microsoft Clarity to understand how the service is used and to improve it. They run only if you accept analytics cookies. Clarity helps us see how pages are used — for example where people click and how far they scroll — so we can find pages that are confusing or broken. It creates heatmaps and anonymized visit replays of page interactions. Text you type and media you upload or generate are hidden from Clarity, and Clarity does not run on checkout, account, subscription, sign-in callback, or password reset pages. Microsoft processes this data under the Microsoft Privacy Statement (https://privacy.microsoft.com/privacystatement).

Your choice is stored in your browser for 6 months. You can change it at any time with the "Cookie settings" button below or the "Cookie settings" link at the bottom of the home page; after a change to "Reject", analytics stops and its cookies are deleted. Our Cookie Notice lists every cookie and storage key we use, with its purpose and how long it lasts.

Read our Cookie Notice · Microsoft Privacy Statement

14Children's privacy

Forgeborn is not for anyone under 18. Our Terms of Service require all users to be at least 18, and we do not knowingly collect personal data from anyone under 18. If you believe a minor has given us personal data, email support@forgeborn.ai. If we learn that we have collected data from a minor, we will close the account and delete the data.

15Changes to this policy

We may update this Privacy Policy as the service changes or as required by law. We will update the "last updated" date and, for material changes, provide additional notice where appropriate.

16Contact

For privacy questions or to exercise your rights, contact us through our contact page or by email at support@forgeborn.ai. We will respond to legitimate requests within the time required by applicable law.