Privacy Policy
Last updated: May 5, 2026
1. Overview
ForgeAI ("we," "us," or "our") is a software-as-a-service platform that provides AI-powered video generation, content scheduling, and publishing to third-party social platforms (including YouTube, TikTok, Instagram, and X), as well as automation resources and community features. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile application, and related services (collectively, the "Service"). By using the Service, you agree to the practices described in this policy.
2. Information We Collect
We may collect the following categories of information:
- Account Information: Name, email address, and password when you create an account.
- Authentication Data: Session tokens and login credentials necessary to authenticate your identity and maintain secure access.
- OAuth Tokens for Connected Platforms: When you connect a third-party account (YouTube, TikTok, Instagram, X), we receive and store OAuth access and refresh tokens that allow the Service to publish content on your behalf. These tokens are encrypted at rest and used solely to fulfill the actions you authorize.
- Generated Content: Videos, scripts, hooks, hashtags, scheduled posts, and other content you create or schedule through the Service.
- Subscription and Payment Data: Information related to your subscription plan, purchase history, and payment status. Payments are processed by third-party providers (see Section 5).
- Usage Data: Information about how you interact with the Service, including features accessed, pages visited, and actions taken.
- Community Content: Posts, comments, images, and other content you voluntarily submit to community features.
- Technical Data: IP address, browser type, device information, operating system, and server logs collected automatically.
- Analytics Data: Aggregated and anonymized usage metrics used for performance monitoring and service improvement.
- Referral Data: UTM parameters and referral source information.
3. How We Use Information
- To provide, operate, and maintain the Service.
- To generate AI-driven video content based on your prompts and settings.
- To publish, schedule, and manage content on third-party platforms you have connected, strictly in accordance with the actions you authorize.
- To process subscriptions, payments, and transactions.
- To authenticate users and manage account access.
- To improve, personalize, and develop new features.
- To moderate community content and enforce our policies.
- To detect, prevent, and address fraud, abuse, and security issues.
- To communicate with you about your account, updates, or support requests.
- To comply with applicable laws and legal obligations.
4. Google API Services User Data Policy
ForgeAI's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Why we request YouTube scopes: We request the youtube and youtube.upload scopes solely to enable users to publish, schedule, and manage videos on their own YouTube channels through ForgeAI. These scopes are used only for the user-initiated actions you authorize.
Specifically, with respect to data received from Google APIs, ForgeAI:
- Does NOT use Google user data for advertising purposes.
- Does NOT sell, transfer, or share Google user data with third parties for purposes unrelated to providing the Service.
- Does NOT allow humans to read Google user data, except (a) with your explicit consent, (b) for security investigations, (c) to comply with applicable law, or (d) for aggregated and anonymized data used for internal operations.
- Stores Google OAuth tokens encrypted at rest and uses them only to perform the publishing, scheduling, and account-management actions you initiate.
- Deletes stored Google user data and tokens within 30 days of you disconnecting your Google account or deleting your ForgeAI account.
You may revoke ForgeAI's access to your Google account at any time at https://myaccount.google.com/permissions.
5. Subscriptions and Payments
ForgeAI offers subscription plans and one-time purchases. Payment processing is handled by trusted third-party providers:
- Apple In-App Purchases: Subscriptions purchased through the iOS app are processed by Apple.
- RevenueCat: We use RevenueCat to validate and manage subscription entitlements across platforms.
- Stripe: Web-based subscriptions and payments are processed by Stripe.
ForgeAI does not store full credit card numbers, bank account details, or other sensitive financial information on our servers.
6. Connected Third-Party Platforms
When you connect a YouTube, TikTok, Instagram, X, or other third-party account to ForgeAI, you authorize us to act on your behalf for the limited purposes you specify (such as publishing and scheduling content). Each connected platform has its own privacy policy and terms of service that govern your use of that platform. We are not responsible for the privacy practices of third-party platforms.
You may disconnect any connected account at any time from the Connect Accounts page in your ForgeAI dashboard. Upon disconnection, the associated OAuth tokens are deleted from our systems within 30 days.
7. Data Storage and Security
We implement industry-standard security measures to protect your information, including TLS/HTTPS encryption for all data in transit, encryption at rest for OAuth tokens and other sensitive credentials, hashed storage of passwords (bcrypt), and access controls on production infrastructure. While we strive to protect your personal data, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security but take reasonable steps to safeguard your information.
8. Data Sharing
We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share information with the following categories of service providers, solely as necessary to operate the Service:
- Third-Party Publishing Platforms: YouTube, TikTok, Instagram, X — content you choose to publish is transmitted to these platforms via their official APIs.
- AI and Voice Providers: ElevenLabs, OpenAI, and other AI service providers process prompts and generated content on our behalf.
- Apple, RevenueCat, Stripe: Payment and entitlement processing.
- Hosting and Infrastructure Providers: For hosting, data storage, and delivering the Service.
We may also disclose information if required by law, legal process, or government request, or to protect the rights, property, or safety of ForgeAI, our users, or the public.
9. User Rights
- Access: You may request a copy of the personal information we hold about you.
- Correction: You may update inaccurate account information from your account settings or by contacting support.
- Deletion: You may delete your account at any time. See Section 11.
- Portability: You may request a machine-readable copy of your data by contacting support@forgeai.app.
- Revocation of Consent: You may disconnect any connected third-party platform at any time.
10. Data Retention and Deletion
- Account data is retained for as long as your account remains active.
- OAuth tokens for connected platforms (including Google) are deleted from our systems within 30 days of account disconnection or account deletion.
- Generated content (videos, scripts, scheduled posts) is retained for the life of your account and deleted upon account deletion, except where retention is required by law.
- Anonymized or aggregated data that cannot identify you may be retained indefinitely for analytics and service improvement.
11. Account Deletion
You may delete your account at any time from the Account page within the app or by emailing support@forgeai.app. Active subscriptions should be canceled before requesting deletion to avoid continued billing.
12. Cookies
We use HTTP-only, secure cookies to maintain your authenticated session. We do not use third-party advertising cookies.
13. Children's Privacy
The Service is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at support@forgeai.app.
14. International Users
If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States or other jurisdictions. By using the Service, you consent to such transfers.
15. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.
16. Contact Us
ForgeAI
Email: support@forgeai.app