Privacy Policy

We collect information you provide directly to us when you create an account, use our services, or contact us. This includes:

• Account information: Your name, email address, and password (encrypted).
• Usage data: Which features you use, AI interactions, project data, and lesson progress.
• Payment information: Processed securely through Stripe — we never store your full card details.
• Technical data: IP address, browser type, device information, and usage logs for security and analytics.
• Content you create: AI conversations, Forge projects, Illusions, support messages, and workspace documents.

We use your information to:

• Provide, maintain, and improve our services and features.
• Process payments and manage your subscription.
• Send you service-related notifications, updates, and security alerts.
• Respond to your support requests and inquiries.
• Monitor for abuse, fraud, and violations of our Terms of Service.
• Analyze usage patterns to improve user experience and product features.
• Comply with legal obligations.

We use cookies and similar technologies for authentication, security, and analytics. Specifically:

• Essential cookies: Required for login, session management, and security.
• Analytics cookies: Help us understand how users interact with the platform.
• Preference cookies: Remember your settings (theme, layout preferences).

You can control cookies through your browser settings. Disabling essential cookies will prevent you from logging in or using the platform.

We do not sell your personal information. We share data only in these circumstances:

• Service providers: Stripe (payments), our AI model providers (for processing your prompts), and hosting infrastructure — all under strict data processing agreements.
• Legal compliance: When required by law, court order, or to protect our rights and safety.
• Business transfers: In the event of a merger, acquisition, or asset sale, user data may be transferred to the acquiring entity.

AI conversations and generated content are sent to third-party AI model providers (such as OpenAI, Anthropic, Google, or DeepSeek) for processing. These providers may retain data according to their own policies.

We implement industry-standard security measures to protect your data:

• Row-level security (RLS) on all database entities to prevent unauthorized access.
• Encrypted password storage using industry-standard hashing.
• HTTPS/TLS encryption for all data in transit.
• Input validation and prompt injection detection on all AI endpoints.
• Rate limiting to prevent abuse and automated attacks.
• Regular security audits and monitoring.

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

If you are a resident of the European Union (GDPR) or California (CCPA), you have the following rights:

• Right to access: Request a copy of your personal data.
• Right to rectification: Request correction of inaccurate data.
• Right to erasure: Request deletion of your account and associated data.
• Right to data portability: Receive your data in a structured, machine-readable format.
• Right to object: Object to certain processing of your data.
• Right to withdraw consent: Withdraw consent for data processing at any time.

To exercise any of these rights, contact us through our Support Center. We will respond within 30 days.

Our services are not directed to children under 13 (or 16 in the EU). We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately and we will delete it.

We may update this Privacy Policy from time to time. Material changes will be communicated through the Platform or via in-app notification. Your continued use of the Platform after changes take effect constitutes acceptance of the revised policy.

If you have any questions about this Privacy Policy or how we handle your data, please create a ticket in our Support Center and our team will assist you.