Privacy Policy

1. Information We Collect

We collect only the minimum information necessary to authenticate your account, maintain your credit balance, and provide AI processing services:

• Account Authentication: When you sign in via Google OAuth or passwordless Email OTP, we record your email address, name, and unique authentication identifier. We do not store passwords.
• IP Address & Fraud Prevention: Your IP address is hashed and checked upon initial registration strictly to prevent multi-account abuse and enforce the single welcome-bonus rule.
• Form Inputs & Generation History: We store the structured inputs you submit and the outputs generated so that you can revisit, edit, copy, and export them in your Dashboard.

2. Zero Training on Commercial AI Models

Your data is never used to train public foundation models. AI Forge operates on tier-1 enterprise cloud AI infrastructure under strict zero-data-training agreements. These agreements contractually guarantee that:

• Customer prompts, system instructions, and completion tokens are processed transiently in memory to generate the output and are never incorporated into public training datasets.
• Your proprietary code, business plans, articles, and personal notes remain confidential and isolated.

3. Database Security & Row Level Security (RLS)

All user data, historical generations, and credit transactions are protected by PostgreSQL Row Level Security (RLS) policies within Supabase. Only authenticated requests matching your specific user ID can read or mutate your records.

4. Payment Processing with Stripe

Payment transactions, credit pack purchases, and recurring subscriptions are handled directly by Stripe, Inc., a PCI Service Provider Level 1 certified payment processor. AI Forge servers never receive, store, or process raw credit card numbers or billing CVVs.

5. Data Retention & User Autonomy

You hold complete autonomy over your stored generations. You can delete specific items from your History tab at any time. If you wish to permanently delete your account and all associated ledger history, submit a request through our Contact Page.

6. Privacy Inquiries

If you have questions regarding our privacy practices or wish to exercise your rights under GDPR or CCPA, contact our privacy officer at [email protected].