Privacy Policy

Last updated 1 June 2026 · IdeaForge · IdeaForge85@gmail.com

This Privacy Policy explains how IdeaForge collects, uses and protects personal data when you use our Service. IdeaForge is the data controller for the personal data described here. We follow the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

1. Contact

IdeaForge is an online-only business. For any privacy question or request, email IdeaForge85@gmail.com.

2. Data we collect

Account data: name, email address, password (stored only as a secure hash), plan, team membership and brand settings.
Content data: topics, product contents, bundles, listings, sales page text, discount codes and reviews you create.
Buyer data: email address used at checkout, order details, downloads, reviews and refund requests.
Payment data: handled by Stripe. We receive limited details such as the payment status, amount and a Stripe reference. We never see or store full card numbers. Creators' identity and bank details are collected by Stripe during payout setup.
Security and usage data: IP address, browser user agent, sign-in attempts, sign-in codes, and logs of actions on your account.
Compliance data: results of automated compliance checks, incidents, warnings and enforcement actions.
Analytics data: if you accept analytics cookies, information about how you use the website.

3. How and why we use your data

To provide the Service and perform our contract with you (account, generation, PDFs, sales pages, delivery, payouts through Stripe).
To take payments and prevent fraud, together with Stripe (contract and legitimate interests).
To keep the Service safe: automated checks of content and activity for breaches of our policies, sign-in protection, and enforcement (legitimate interests in protecting buyers, creators and the platform; and legal obligations).
To send service emails such as sign-in codes, receipts, download links, review requests, dispute updates and account notices (contract and legitimate interests).
To answer support requests (legitimate interests).
To improve the website with analytics, only if you agree (consent).
To meet legal, tax and accounting obligations.

4. Automated decision-making

We use automated tools, including AI review, to check bundles when they are published and to assess refund disputes. Where an automated check finds a clear and obvious breach it may block publishing or apply a sanction under our Acceptable Use Policy, and may refund a buyer automatically. You can ask for a human review of any automated decision that affects you by emailing IdeaForge85@gmail.com. Permanent account termination is always confirmed by a person.

Stripe for payments, subscriptions, Connect payouts, identity checks and fraud prevention.
AI model providers that process prompts and content to generate products and run compliance and dispute checks.
Email delivery providers to send service emails.
Hosting and infrastructure providers that store and run the Service.
Analytics providers, only if you consent.
Creators: when you buy a bundle, the creator can see sales totals and the review you leave, but not your full email address.
Authorities, where the law requires it or to report serious illegal content or fraud.

We do not sell your personal data.

6. International transfers

Some providers may process data outside the UK. Where they do, we rely on adequacy regulations or appropriate safeguards such as the UK International Data Transfer Agreement or Addendum.

7. How long we keep data

We follow our Data Retention Policy:

Account data: kept while your account is open. When you delete your account we erase your personal data straight away and keep an anonymised record for 6 years, then delete it.
Sales records: 6 years, for tax and legal reasons. A deleted creator's details are anonymised.
Buyer downloads: download links work for 30 days, even if the creator deletes their account.
Refund and dispute records: 6 years.
Penalty and breach logs: 6 years.
Technical logs (such as IP addresses, browser details, job logs and expired sign-in codes): 90 days.
Cookie and analytics data: 12 months. We ask for your cookie choice again every 12 months.

Records are never deleted before the end of their retention period, and are deleted automatically once it ends. Every retention action is logged so our team can check it.

8. Your rights

You have the right to access, correct, delete or restrict your data, to object to processing based on legitimate interests, to data portability, and to withdraw consent at any time. You can download a copy of your account data, and delete your account, from your Profile. When you delete your account we erase your profile, products and personal data and cancel any subscription; bundles people have already bought stay available to those buyers until their download links expire, and sales and tax records are kept for 6 years without your personal details. Deletion is paused while a penalty, appeal or buyer dispute on your account is still under review. To make any other request, email IdeaForge85@gmail.com. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

9. Security

We use encrypted connections, hashed passwords, optional two-step sign-in, access controls and monitoring to protect your data. No system is perfectly secure, so please use a strong, unique password.

10. Children

The Service is not intended for anyone under 18 and we do not knowingly collect their data.

11. Changes

We will tell you about material changes to this policy in the app or by email.

Questions about this document? Email IdeaForge85@gmail.com or visit Support.