Privacy Policy

1. Introduction

VoiceForged ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our AI-powered content creation platform ("the Service").

2. Information We Collect

2.1 Information from Google OAuth

When you sign in with Google, we receive the following information from your Google account:

• Your name
• Your email address
• Your profile picture URL

We do not access your Google contacts, calendar, drive files, or any other Google services beyond basic profile information.

2.2 Content You Create

We store the content you create and manage through the Service, including content drafts, published posts, personas, feed preferences, content sources, and account settings.

2.3 Usage Data

We collect basic analytics data through Vercel Analytics, which may include page views, session duration, and general usage patterns. This data is aggregated and does not include personal identifiers.

2.4 Payment Information

If you subscribe to a paid plan, payment information is collected and processed by Stripe. We do not store your credit card number, CVV, or full payment details on our servers. We only store your Stripe customer ID and subscription status.

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Authenticate your identity and manage your account
• Process your content through AI models to generate, edit, and optimize content
• Process payments and manage subscriptions
• Send service-related communications (account changes, security alerts, billing updates)
• Monitor and improve the quality of AI-generated content (when LangSmith tracing is enabled)
• Detect and prevent abuse, fraud, and security issues

4. Third-Party Services & Data Sharing

We share your information with the following third-party service providers, solely to operate the Service:

We do not sell, rent, or trade your personal information to any third party. We do not share your data with advertisers.

5. Data Retention

• Account data: Retained for as long as your account is active. Upon account deletion, your data is permanently removed within 30 days.
• Content data: Your drafts, published content, and personas are retained until you delete them or delete your account.
• Payment records: Billing records may be retained for up to 7 years as required by tax and accounting regulations.
• Analytics data: Aggregated analytics are retained indefinitely but contain no personal identifiers.
• AI traces: LangSmith traces, when enabled, are retained according to LangChain's retention policies.

6. Your Rights

You have the right to:

• Access: Request a copy of all personal data we hold about you. You can export your data at any time through your account settings or via our API.
• Deletion: Request permanent deletion of your account and all associated data. This can be done through your account settings or by contacting us.
• Export: Download a machine-readable copy of your content, personas, settings, and other data in JSON format.
• Correction: Update or correct your personal information through your account settings.
• Restriction: Request that we limit the processing of your data in certain circumstances.

To exercise any of these rights, contact us at privacy@voiceforged.com or use the account management features within the Service.

7. Cookies & Local Storage

We use only essential cookies required for the Service to function:

• Session cookie: Maintains your authenticated session. Expires when you sign out or after the session timeout period.
• CSRF token: Protects against cross-site request forgery attacks.

We do not use tracking cookies, advertising cookies, or third-party analytics cookies. We do not participate in cross-site tracking or ad networks.

8. Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS/HTTPS), encryption at rest for stored data, secure authentication via OAuth, and regular security reviews. However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

9. Children's Privacy

The Service is not intended for use by anyone under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 16, we will delete it promptly.

10. International Data Transfers

Your data may be processed and stored in the United States or other countries where our service providers operate. By using the Service, you consent to the transfer of your data to these jurisdictions, which may have different data protection laws than your country of residence.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

12. Contact

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at privacy@voiceforged.com.