Privacy Policy
Last updated: July 12, 2026
1. The short version
Your creative work is yours and stays private to your account. Your writing, your projects, and your voice recordings are never pooled with other users and never used to train shared models. We collect the minimum we need to run the Service, and we do not sell your data.
2. What we collect
Account data: your email address, an optional display name, and your sign-in method (email link or Google). We do not store passwords; the product is passwordless.
Creative content: the projects, scripts, elements, images, video, audio, and voice recordings you create or upload. This is stored so the Service can function and is scoped to your account.
Usage and billing data: credit usage, plan status, and payment events. Payments are processed by Stripe; we do not receive or store your full card number.
Technical data: standard server logs (such as IP address and request metadata) used for security, rate limiting, and abuse prevention.
3. The privacy split
Forge is built around a hard separation. Your creative content and voice live in per-user project storage and are never pooled across users. Only anonymized structural signals (for example, that a generation was accepted or rejected, never its content) may be used to improve the system. When in doubt, data stays private.
Your voice recordings are treated as personal data of the highest sensitivity: they are private to your account, used only to produce the audio you request, and never used to build shared voice models.
4. Subprocessors
To provide the Service we send the minimum necessary data to processing providers acting on our instructions: Cloudflare (hosting, storage, and delivery), Stripe (payments), Resend (transactional email), Anthropic and OpenAI (text and image generation), BytePlus (video generation), ElevenLabs (voice and music generation), and Google (optional sign-in). Content sent to generation providers is sent to fulfill your specific request, not to train their models where a no-training option is available to us.
5. Cookies
We use one first-party session cookie to keep you signed in. There are no third-party advertising cookies and no cross-site tracking on this site.
6. Retention and deletion
Your content is retained while your account is active so your projects keep working. Deleting a project permanently removes its data from live storage. To delete your account and all associated data, contact us and we will complete the deletion within 30 days, except where law requires longer retention of billing records.
7. Your rights
Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. Contact us to exercise any of these rights and we will respond within the timeframe your local law requires.
8. Security
Sessions are carried in httpOnly cookies, project access is owner-scoped on every request, and media is stored in access-controlled object storage. No system is perfectly secure; if we learn of a breach affecting your data we will notify you as required by law.
9. Children
The Service is not directed to children under 13 and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact us and we will delete it.
10. Changes to this policy
We may update this policy from time to time. If a change is material we will notify you by email or in the app before it takes effect.
11. Contact
One with the Sea, LLP is the data controller for this Service. Privacy questions and requests: john@owtsfilms.com, or use the contact page. Postal address available on request. Governing law placeholder for privacy disputes: [STATE].