Privacy Policy

• Account information: name, email address, and password (hashed) used to create and access your account.
• Authentication data: session tokens and login metadata managed by our authentication provider (Supabase Auth), including IP address and approximate location at sign-in.
• User content: topics, prompts, generated scripts, AI voiceovers, thumbnail concepts, assembled videos, and any other content you create or upload using the Service.
• Payment data: billing email, plan, subscription status, and transaction metadata. Payments are processed by Dodo Payments acting as Merchant of Record. We do not store full payment card numbers.
• Usage analytics: product events, feature usage, page views, device and browser information, collected via PostHog.
• Error logs and diagnostics: stack traces, request metadata, and performance data collected via Sentry to detect and fix bugs.
• Google / YouTube account data: when you connect a YouTube channel, we receive your YouTube channel ID, channel title, thumbnail, and an OAuth access/refresh token scoped to uploading videos and reading basic channel information.
• Support communications: messages you send to our support address and related metadata.

• Provide, operate, secure, and improve the Service;
• Generate AI scripts, voiceovers, thumbnails, and videos you request;
• Upload videos to your YouTube channel when you initiate an upload;
• Process subscriptions, billing, refunds, and invoices;
• Respond to support requests and send transactional emails (e.g. welcome, receipts, password resets, billing notifications);
• Detect, prevent, and respond to fraud, abuse, and security incidents;
• Comply with legal, tax, and accounting obligations.

We share the minimum data necessary with the following processors. Each processor handles your data subject to its own privacy policy.

• OpenAI — AI script generation and text-to-speech voice synthesis. (Privacy Policy)
• Supabase — authentication, database, and file storage. (Privacy Policy)
• Shotstack — automated video rendering and assembly. (Privacy Policy)
• Resend — transactional email delivery. (Privacy Policy)
• Dodo Payments — payment processing and Merchant of Record for subscriptions. (Privacy Policy)
• Google / YouTube API Services — connecting your YouTube channel and uploading videos on your behalf. (Google Privacy Policy)
• PostHog — product analytics. (Privacy Policy)
• Sentry — error monitoring and diagnostics. (Privacy Policy)

ChannelForge AI uses YouTube API Services to let you connect your YouTube channel and upload videos. By connecting a YouTube channel, you also agree to the YouTube Terms of Service and acknowledge the Google Privacy Policy.

Google user data we access: basic channel information (channel ID, title, thumbnail) via the youtube.readonly scope, and upload permission via the youtube.upload scope. We receive an OAuth access and refresh token that we store securely and use solely to perform actions you initiate in the Service.

How we use it: to display your connected channel inside ChannelForge AI and to upload videos you explicitly request to publish. How long we keep it: for as long as the connection is active. Tokens are deleted when you disconnect the channel, delete your account, or revoke access from your Google Account.

We do not sell, rent, or transfer Google user data to third parties, use it for advertising, or use it for any purpose other than the user-facing features described above. Google user data is not used to train AI/ML models.

You can revoke ChannelForge AI's access to your Google account at any time at https://myaccount.google.com/permissions.

We use strictly necessary cookies to keep you signed in and remember preferences, and limited first/third-party analytics cookies (via PostHog) to understand product usage. You can control cookies through your browser settings; disabling them may break parts of the Service.

We retain account data and user-generated content while your account is active and for a reasonable period afterward to comply with legal, tax, and accounting obligations. Error logs and analytics events are retained on a rolling basis (typically up to 12 months). You may request deletion at any time (see "Your Rights").

We use industry-standard administrative, technical, and physical safeguards to protect your data, including encryption in transit (HTTPS/TLS), encryption at rest for credentials and OAuth tokens, hashed passwords, row-level security on our database, and access controls. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

Your data may be processed in countries other than your own, including the United States and the European Union. Where required by law, we rely on appropriate safeguards (such as the EU Standard Contractual Clauses) for international data transfers.

ChannelForge AI is not directed to children. The Service is not intended for anyone under the age of 13, and individuals under 18 (or the age of majority in their jurisdiction) may only use it with the involvement of a parent or legal guardian. We do not knowingly collect personal data from children. If you believe a child has provided us data, please contact us and we will delete it.

Subject to applicable law, you may have the right to access, correct, export (data portability), restrict processing of, or delete your personal data, and to withdraw consent where we rely on it. EU/EEA and UK users have rights under the GDPR/UK GDPR; California residents have rights under the CCPA/CPRA, including the right to know, delete, correct, and opt out of "sale" or "sharing" of personal information (we do not sell your personal information).

To exercise any of these rights, email us at ghostforgeapp@gmail.com from the address on file. We will respond within the timeframe required by applicable law.

We may update this Privacy Policy from time to time. The "Last updated" date above reflects the most recent change. Material changes will be notified by email or in-app notice before they take effect.

ChannelForge AI is operated by MS.365 CO., a licensed sole proprietor (Osek) registered in Israel. For any privacy questions or to make a data subject request, email ghostforgeapp@gmail.com. Full legal entity and registration details are available on request and are provided to regulatory authorities and payment partners where required by law.