ForgeOS · Effective date: October 14, 2026
This Privacy Policy explains how ForgeOS ("we", "us") handles information in connection with ForgeOS ("the Service"). It covers the ForgeOS web app and the ForgeOS Chrome extension ("FORGEOS — Creator Clipper").
You enter and store outreach data — creator names, handles, public profile details, your notes, message templates, images, and tasks. This data is stored in our database (hosted by Supabase) inside your own workspace, so it is available in the app and the extension when you sign in. Database rules make each workspace readable and writable only by its signed-in owner and the teammates that owner invites. Some preferences and drafts are also kept locally in your browser.
Subscriptions are handled by Whop. When you subscribe, Whop processes your payment and provides us with the minimum needed to verify your subscription (such as your email address, Whop user ID, membership ID, plan, status, renewal date, and payment IDs for credit-pack purchases). We do not receive or store your full payment card details. See Whop's privacy policy for how they handle payments.
When you use an AI feature, the text you submit (for example, a message you paste to get a reply, or profile information you paste to scan) is sent to our AI providers (SenseNova by SenseTime, with Anthropic as a backup) through our secure server function solely to generate that output, and a usage count is recorded to enforce your plan's credit limit. We do not use your content to train models. Do not paste sensitive personal data you don't want processed. See SenseNova's and Anthropic's privacy terms for how they handle it.
ForgeOS includes a Shared Replies library — a cross-tenant reply-template pool visible to every subscriber. When the AI drafts a reply for you, it may automatically add a paraphrased, generic version of the pattern (a short characterisation of what the creator said and a reusable version of the reply) to this shared pool without an explicit approval step, so that every operator benefits from patterns that have proven useful. What we store in the pool: the category (e.g. "not interested", "busy"), the message kind (DM / follow-up / email), a paraphrased trigger, the reusable reply text, and the email of the operator who initiated the reply. What we do not store in the pool: the creator's real name, @handle, platform URL, product names, direct quotes of the creator's message, or any other identifier that would let a viewer recognise the original conversation. The AI is instructed to strip these before inserting. You can browse and copy pool entries from the Shared Replies view; entries that leak identifying information should be reported to us and will be hidden. If you would prefer that your AI-generated replies not contribute to this pool, contact us and we will opt your account out.
The optional ForgeOS Chrome extension reads information from Instagram, TikTok and Social Blade pages you actively open (such as a public handle, display name, follower count, bio and profile link) when you use it, to help you save that creator. It does not collect your browsing history, does not run in the background collecting data, and does not send messages for you — you always press send yourself. You sign in to the extension with your email and a 6-digit code; it stores your sign-in session and settings in Chrome's extension storage. Creators you save go to your workspace in the database described in section 1. The extension also passes message drafts between the ForgeOS app tab and the page you are on.
The use of information received from the extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. We use this data only to provide the extension's features. We do not sell it, do not use or transfer it for advertising, credit-worthiness or lending purposes, and do not let humans read it except with your permission, for security reasons, or where the law requires.
Scouts and monetized members of Deal Rooms can connect their own Gmail account so ForgeOS can send their creator outreach emails and follow-ups for them. When you connect, we ask Google only for permission to send email on your behalf (gmail.send) and to see your email address (userinfo.email, openid). We do not request, and cannot use, any permission to read, search, label or delete the emails in your Gmail account.
ForgeOS's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Gmail access only to send the emails you or your automation ask us to send. We do not use Google user data for advertising, do not sell it, do not use it to train AI models, and do not let humans read it except with your permission, for security reasons, to comply with the law, or where the data is aggregated and anonymised for internal operations.
To run your account we keep: your email address (used to sign you in with an emailed code), your plan and subscription status, your team membership, and AI credit and audit usage records (counts and dates). We also collect basic technical information needed to run and secure the Service, such as server logs. We do not sell your personal information.
We rely on: Whop (billing & subscription verification), SenseNova by SenseTime (AI generation; servers may be outside your country, including in China) and Anthropic (backup AI generation), Supabase (database, sign-in & server functions), Resend (sending sign-in code emails and receiving replies to outreach emails), Google (sending outreach from your own Gmail, only if you connect it), and Vercel (hosting the app). Each processes data only as needed to provide their part of the Service.
You can edit or delete the creators and other records in your workspace from the app at any time, and remove the extension's stored data by signing out or uninstalling it. You can ask us to delete your account data. Depending on where you live, you may have rights to access, correct, or delete personal data we hold about you — reach us through our website and we'll help.
Workspace data is kept while your account is active and deleted on request. Data in your browser persists until you remove it. Subscription records are kept as long as needed for billing and legal compliance. We use reasonable technical measures (including keeping API keys server-side, never in the app) to protect information, but no method is 100% secure.
ForgeOS is not directed to anyone under 18 and we do not knowingly collect their data.
We may update this policy; changes are posted here with a new date. Questions or requests: reach us through our website at https://forgecreators.vercel.app.