Privacy Policy

Effective: July 2026

DMForge ("we", "us") is operated by a UK-based sole trader. We are committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

The data controller is the sole trader operating DMForge. You can contact us at contact@dmforge.org.

2. What Data We Collect

• Account data: email address when you register or sign in.
• Payment data: billing information processed by Stripe. We do not store card details — Stripe handles this under their own privacy policy.
• Usage data: pages visited, features used, session timestamps, IP address (collected via hosting infrastructure on Vercel).
• Content you create: agent prompts, qualification criteria, DM scripts, and other content you submit to the AI system.
• Communications: emails you send to us.

3. Why We Collect It (Lawful Basis)

• Contract: account and payment data are needed to provide the service you signed up for.
• Legitimate interest: usage data helps us improve DMForge and maintain security.
• Legal obligation: we retain transaction records as required by UK tax law.

4. How Long We Keep It

• Account data: for as long as your account is active, plus 30 days after deletion.
• Payment records: 7 years (UK HMRC requirement).
• Usage analytics: aggregated after 90 days; raw logs deleted after 30 days.
• Content you create: retained while your account is active; deleted on account deletion.

5. Who We Share It With

We do not sell your data. We share data only with:

• Stripe — payment processing
• Vercel — hosting and infrastructure
• Google (Firebase / Firestore) — database
• Google (Gemini API) — AI content generation
• Cloudflare — email routing

All processors are bound by appropriate data processing agreements.

6. International Transfers

Some processors (Vercel, Google, Stripe) may process data outside the UK. Where this occurs, transfers are protected by UK adequacy decisions or Standard Contractual Clauses.

7. Your Rights

Under UK GDPR you have the right to:

• Access a copy of your personal data
• Rectification of inaccurate data
• Erasure ("right to be forgotten")
• Portability of your data in a machine-readable format
• Object to processing based on legitimate interest
• Restriction of processing while a dispute is resolved

To exercise any right, email contact@dmforge.org with subject line "Data Request". We will respond within 30 days.

8. Complaints

If you are unhappy with how we handle your data, you can lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk. We would appreciate the chance to address your concerns first — please contact us at contact@dmforge.org.

9. Cookies

We use essential cookies for authentication and session management. If we add analytics or marketing cookies in future, we will update this policy and request your consent via a cookie banner.

10. Changes to This Policy

We may update this policy. Material changes will be notified by email or via an in-app notice. Continued use of DMForge after changes constitutes acceptance.

Last updated: July 2026 · Contact: contact@dmforge.org