Privacy Policy — Velora Forge

1. What we collect

Account data — email address, name if you provide one, and authentication identifiers. If you sign in with Google, we receive your email and basic profile from Google.
Project data — the instructions, messages, files, builds and previews for the apps you create in the Studio.
Payment data — handled by our payment provider (Stripe). We store your subscription status, invoices and purchase records, not your card details.
AI usage data — usage counters (tokens, credits consumed, daily counts) needed to meter credits and enforce fair-use limits.
Developer data — if you connect GitHub, we store the access token or connection needed to push code to your repositories. It is stored privately and is not readable by other users.
Support messages — messages you send us through in-app messaging.

2. How we use your data

We use your data to operate the Service: creating accounts, generating and hosting your builds, metering and charging credits, processing payments, publishing your Store listings, running ForgeHire profiles you create, paying ambassador commissions, and providing support. We also use aggregated usage data to keep the Service fast, prevent abuse and improve quality.

3. AI providers

When you build with the Studio or chat with agents, your instructions and relevant project context are sent to our AI provider (Anthropic's Claude) to generate results. We send the minimum context needed for the task. AI providers process this content under their own terms and do not use it to train their models. If you supply your own API key for a provider, your usage is billed directly to you by that provider.

4. Cookies and local storage

We use strictly necessary cookies and browser local storage to keep you signed in and to remember your preferences. We do not use advertising or cross-site tracking cookies. Telegram Mini App sessions use Telegram's own web app data.

5. Sharing

We share data only with: our backend and hosting provider (Lovable Cloud / Supabase), our payment provider (Stripe), our AI provider (Anthropic), and — where you choose to use them — integrations you connect yourself (GitHub, Ayrshare, Telegram). Public content (Store listings, published apps, ForgeHire profiles you make public) is visible to others by design. We may disclose data if required by law or to protect our rights, and in connection with a business transfer.

6. Data retention

Your projects and account data are kept while your account is active. When you delete your account, we delete your projects and personal data within 30 days, except records we must keep for accounting (invoices, purchase records) and legal reasons. App versions and builds you have published may persist in the Store until you unpublish them.

7. Your rights

You can access, correct, export or delete your personal data. Depending on where you live (for example in the EU/EEA, UK or Australia), you may have additional rights, including the right to object to or restrict processing and to lodge a complaint with your data protection authority. To exercise any right, contact us through in-app messaging; we respond within 30 days.

8. Security

We protect your data with encryption in transit, access controls, row-level security in our database, and hashed storage of sensitive credentials (developer API keys are stored only as hashes; GitHub tokens are private to you). No service is perfectly secure; if a breach affects your data, we will notify you as required by law.

9. Children

The Service is not directed at children under 16, and we do not knowingly collect their data.

10. Changes and contact

We may update this policy; material changes will be announced on the Service. Questions or requests: reach us via the Telegram Mini App or in-app messaging on veloraforge.ai. See also our Terms of Service.