Privacy Policy
Last updated: 2026-09-10
This policy describes how ForgeRank AI ("we", "us", "our") handles personal data, what we collect, why, and the rights you have.
ForgeRank AI respects your privacy. This policy explains what data we collect, why, who we share it with, and the rights you have. It is written to align with the EU General Data Protection Regulation (GDPR), the UK GDPR, and the California Consumer Privacy Act (CCPA/CPRA) where they apply.
1. Information we collect
- Account data: the email address you provide at sign-up (handled through Supabase Auth).
- Content you submit and generate: the topics, keywords, and source material you enter, the AI-generated outputs we produce for you, and the articles or posts you paste into the Content Analyzer for scoring. Articles you submit for analysis may be processed and distilled into reusable factual fragments ("materials") that we use to improve the quality of content generated for all users.
- Payment data: processed by our Merchant of Record, Waffo Pancake. We do not store your card or bank details; Waffo Pancake shares only the minimum confirmation data needed to fulfil your order (order id, amount, status).
- Technical & usage data: basic request logs (approximate timestamp, IP address) used for security, abuse prevention, and service operation. We run no advertising or third-party tracking cookies by default.
2. How we use your data
- To provide and improve the Service: generate content, maintain your credit balance, and personalize results.
- To score and analyze content you submit through the Content Analyzer, and to extract reusable factual fragments from high-quality submissions to improve generation quality for all users. Extracted fragments are aggregated and do not identify you; they may appear in content generated for other users.
- To process payments, prevent fraud, and enforce our policies (including the Acceptable Use Policy and Refund Policy).
- To communicate with you about your account, orders, and — only if you opt in — product updates.
3. Sub-processors & data sharing
We use a small number of vetted service providers. Each acts as our processor/sub-processor under a written agreement:
- Waffo Pancake (Merchant of Record) — billing, tax, and payment handling. Processes the payment data you submit at checkout.
- Supabase — authentication, database, and hosting of account and content records.
- DeepSeek — the AI model that generates your content. The topics/keywords you submit are sent to DeepSeek to produce output, then returned to you. We do not send Waffo Pancake payment details to DeepSeek.
We do not sell your personal data. We disclose data only to these providers, to legal authorities where required by law, or in connection with a corporate transaction (with notice).
4. Legal basis for processing (GDPR)
- Performance of a contract (Art. 6(1)(b)): to provide the Service you sign up for and deliver purchased credits.
- Legitimate interests (Art. 6(1)(f)): to secure the Service, prevent abuse, and improve it — balanced against your rights.
- Consent (Art. 6(1)(a)): for any optional marketing communications, which you may withdraw at any time.
- Legal obligation (Art. 6(1)(c)): to retain limited records required by tax or accounting law.
5. Data retention & deletion
You may delete your account and associated personal data at any time from the app settings, or by requesting deletion at wodeniaa@gmail.com. We delete or anonymize personal data within 30 days of a verified deletion request, except where we must retain limited records to meet tax, accounting, or legal obligations (in which case we keep only what is strictly required and isolate it).
6. Your rights
Where the GDPR/UK GDPR apply, you have the right to: access your data; rectify inaccurate data; erasure ("right to be forgotten"); restrict or object to processing; data portability (receive your data in a structured, machine-readable format); and to withdraw consent at any time. To exercise any right, contact wodeniaa@gmail.com. We respond within one month as required by law. You also have the right to lodge a complaint with your local supervisory authority.
7. International data transfers
Our providers (Waffo Pancake, Supabase, DeepSeek) may process data on servers located outside your country, including in the United States. Where we transfer personal data out of the EEA/UK, we rely on appropriate safeguards such as the EU Standard Contractual Clauses (SCCs) or the UK International Data Transfer Agreement (IDTA), and provider certifications, to protect your data.
8. Contact
Questions or requests about this policy? Email wodeniaa@gmail.com.