Privacy Policy

Effective Date: April 2, 2026

AdForge Studios, Inc. ("AdForge," "we," "our," or "us") operates the AdForge platform at adforgestudios.com. This Privacy Policy explains how we collect, use, disclose, and protect your personal information.

1. Information We Collect

We collect the following categories of personal information:

• Account identifiers: email address, account ID (UUID), authentication metadata
• Business data: brand names, product descriptions, website URLs, uploaded images and videos
• Usage data: feature usage counts, API cost logs, subscription tier and billing identifiers
• Generated content: AI-generated personas, audiences, creatives, ad kits, and video jobs created using our platform
• Payment data: Stripe customer and subscription IDs (we do not store raw card numbers)
• Log data: IP address, browser type, referring URL, pages visited, timestamps

2. How We Use Your Information

• Providing, operating, and improving the AdForge platform
• Processing subscription payments through Stripe
• Generating AI creative assets on your behalf using third-party AI providers (Google Gemini, VEO, Claude via OpenRouter, ElevenLabs)
• Conducting market intelligence research using BrightData web scraping
• Sending transactional emails (account confirmations, billing receipts)
• Monitoring service health and debugging errors via Sentry
• Complying with legal obligations

3. Information We Do Not Sell

AdForge does not sell, rent, or share your personal information with third parties for their own marketing or advertising purposes. We share data only with service providers who process it on our behalf (see Section 4).

4. Third-Party Service Providers

We use the following sub-processors to deliver our service:

• Supabase — database, authentication, and file storage
• Stripe — payment processing
• Vercel — hosting and edge delivery
• Google (Gemini / VEO) — AI image and video generation
• Anthropic via OpenRouter — AI text generation (personas, ad copy)
• ElevenLabs — text-to-speech voiceover generation
• BrightData — web data collection for market intelligence features
• Sentry — error monitoring

5. Data Retention

We retain your account data for as long as your account is active, plus a 90-day grace period after account closure. Usage logs and API cost records are retained for 12 months for billing reconciliation, then deleted. You may request earlier deletion at any time (see Section 7).

6. Cookies and Tracking

We use strictly necessary cookies for session authentication (Supabase auth tokens) and performance monitoring. We do not use third-party advertising trackers or behavioral tracking cookies.

7. Your Privacy Rights (CCPA / California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the following rights:

Right to Know

You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the sources of that information, the purposes for which we use it, and the categories of third parties with whom we share it.

Right to Delete

You have the right to request deletion of personal information we have collected from you, subject to certain exceptions (e.g., completing a transaction, complying with legal obligations).

Right to Opt Out of Sale

AdForge does not sell personal information. However, you may exercise this right at any time via our Do Not Sell or Share My Personal Information page.

Right to Non-Discrimination

We will not discriminate against you for exercising any of your CCPA rights.

How to Exercise Your Rights

You can exercise your rights through any of the following methods:

1. Self-service (fastest): Go to Settings → Privacy in your AdForge account to download your data or delete your account immediately.
2. Email request: Send a request to privacy@adforgestudios.com. We will respond within 45 days.

We may need to verify your identity before processing a request. Verification is typically done by confirming your account email address.

8. Security

We protect your data using industry-standard controls: TLS encryption in transit, AES-256 encryption at rest (Supabase), Row-Level Security policies on all database tables, and short-lived session tokens. We conduct regular security reviews and dependency audits.

9. Children's Privacy

AdForge is not directed to children under 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by posting the new policy on this page with an updated effective date, and by sending an email to registered users.

11. Contact Us

For privacy-related questions or to exercise your rights, contact us at: