Privacy Policy

Account information: Email address, display name, and authentication credentials (or OAuth tokens if you sign in with Google/Apple).

Payment information: Processed and stored by Stripe, Inc. We never see or store your full card number. We receive your subscription status and billing history from Stripe.

Conversation data: Messages you send and receive in chats with AI companions. This includes text, uploaded images, and voice call transcripts.

Companion data: Characters you create or customize, including names, personality settings, appearance preferences, and associated AI-generated content (images, voice).

Usage data: Features accessed, interaction frequency, device type, browser type, and general analytics. We do not use third-party tracking cookies.

Content preferences: Your content rating settings (e.g., NSFW enabled/disabled) and persona configuration.

• Provide the Service: Process your messages through AI models, generate companion responses, store conversation history, and enable companion memory and personality evolution.
• Billing: Process payments, manage subscriptions, and send transaction-related emails.
• Safety: Screen messages through our content safety system to enforce our Content Policy.
• Improvement: Analyze aggregate, anonymized usage patterns to improve the Service. We do not train AI models on your private conversations.
• Communication: Send account-related notifications (password resets, billing confirmations, service announcements).

We use the following third-party services to operate SoulForge:

• Google (Gemini API): Your conversation messages are sent to Google's Gemini API to generate AI responses. Google's data handling is governed by their API Terms of Service. Paid API usage is not used by Google to train their models.
• Stripe: Handles all payment processing. See Stripe's Privacy Policy.
• ElevenLabs: Provides voice synthesis for certain companion voices. Voice call audio may be processed through their API.
• fal.ai: Generates AI companion images. Image generation prompts (not your conversation text) are sent to their API.
• Cloudflare: Provides DNS and CDN services. See Cloudflare's Privacy Policy.
• Netlify: Hosts the frontend application.

Your data is stored on servers located in the United States. We use industry-standard security measures including encrypted connections (TLS/HTTPS), access controls, and secure authentication. However, no method of electronic storage is 100% secure, and we cannot guarantee absolute security.

Conversation data is stored in structured log files on our servers. Companion memory is stored in a vector database (Qdrant) for semantic retrieval. Your password is hashed and never stored in plaintext.

• Active accounts: Your data is retained for as long as your account is active.
• Deleted accounts: When you delete your account, we permanently delete your conversation history, companion data, vector memory, and personal information within 30 days. Some data may persist in encrypted backups for up to 90 days before being purged.
• Billing records: Transaction records may be retained as required by tax and financial regulations.

All users can:

• Access and download their conversation history.
• Delete individual companions and their associated data.
• Delete their entire account and all associated data.
• Update their personal information.
• Adjust content preferences at any time.

EU/EEA residents (GDPR): You have the right to access, rectify, erase, restrict processing, data portability, and object to processing of your personal data. To exercise these rights, contact support@soulforgeai.com.

California residents (CCPA): You have the right to know what personal information is collected, to delete your personal information, and to opt out of the sale of personal information. We do not sell personal information.

SoulForge is strictly for users aged 18 and older. We do not knowingly collect information from anyone under 18. If we discover that a user is under 18, we will immediately terminate their account and delete their data.

We use browser localStorage to store your authentication token, UI preferences, and cached conversation data. We do not use third-party tracking cookies. No advertising trackers are present on SoulForge.

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email or in-app notice. Continued use after changes constitutes acceptance.

For privacy-related questions or to exercise your data rights, contact us at support@soulforgeai.com.