Privacy Policy

Last updated: 16 June 2026

This Privacy Policy explains what data Forgely (“we”, “us”) collects when you use our Discord bot builder and hosting platform, how we use it, and the choices you have. It also explains the strict way we handle your Discord bot tokens.

1. Data we collect

Account information

When you sign up, our identity provider (Clerk) processes your email address and, if you use Discord sign-in, basic Discord profile information (such as your user ID, username, avatar, and the guilds you are a member of).

Billing information

Payments are processed by Stripe. We receive limited billing metadata (such as plan, subscription status, and the last four digits of a card). We never receive or store your full card number — that is held by Stripe.

Bot configuration and content

We store the bots you create: their names, settings, generated code and files, premium configuration, and related metadata, so we can host and run them for you.

Premium subscription data

If you subscribe to a premium plan offered by a bot, we record which Discord server and plan the subscription relates to, its status, and the associated Stripe records, so the bot can grant your entitlements and so we can handle refunds within the window described in our Terms.

Usage and device data

We collect basic usage and log data (such as actions taken in the app, timestamps, and error logs) to operate, secure, and improve the service, plus analytics described in our Cookies Policy.

2. Discord bot tokens — special handling

Your Discord bot token and related secrets are required to run your bot. We treat them with the highest care:

• they are transmitted over HTTPS directly to the hosting environment’s secure variable storage;
• they are never written to the Forgely database;
• they are never logged by our services; and
• they are used only to deploy and run your bot.

3. How we use your data

• to provide, operate, host, and maintain the platform and your bots;
• to process payments, manage subscriptions and credits, handle payouts, and prevent fraud;
• to provide support and respond to your requests;
• to secure the service and investigate abuse or violations of our Terms;
• to understand usage and improve features and reliability;
• to comply with legal, tax, and accounting obligations.

4. AI processing

When you use AI-powered features, the relevant inputs (such as your instructions and your bot’s code or configuration) are processed by Forgely AI, which runs on trusted third-party AI infrastructure providers acting on our behalf. We do not use your private bot code to train public models. Avoid placing secrets or personal data of others into AI prompts.

5. How we share your data

We share data only as needed to run the service, with providers acting under contract on our behalf:

• Clerk — authentication and account management;
• Stripe — payments, subscriptions, and payouts (Stripe Connect);
• Discord — sign-in and bot operation via the Discord API;
• our cloud hosting provider — running and storing your bots and our application;
• AI infrastructure providers — powering Forgely AI features;
• analytics providers — measuring website traffic (see our Cookies Policy).

We may also disclose data when required by law, to enforce our Terms, to protect rights and safety, or in connection with a merger, acquisition, or sale of assets. We do not sell your personal data.

6. Cookies and analytics

Our marketing site uses cookies and Google Analytics 4 to understand aggregate traffic and improve the site. Full details, including the categories of cookies and how to control them, are in our Cookies Policy. Depending on your region, we will request consent before setting non-essential cookies.

7. Data retention

We keep your data for as long as your account is active or as needed to provide the service. When you delete a bot, its files and database are removed. When you close your account, we delete or anonymise personal data, typically within 30 days, except where we must keep certain records longer — for example, transaction and tax records may be retained for up to 7 years, and routine backups may persist for a short period before being overwritten.

8. Security

We use industry-standard measures including HTTPS, scoped access, and secret isolation (as described for Discord tokens). No system is perfectly secure, but we work to protect your data and will notify you of material breaches as required by law.

9. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us using the details in section 13. You may also have the right to complain to your local data-protection authority.

10. GDPR (European & UK users)

If you are in the EEA or UK, we process your personal data on the legal bases of performing our contract with you (running your account and bots), your consent (for non-essential cookies), compliance with legal obligations (tax, accounting), and our legitimate interests (securing and improving the service, preventing fraud). You have the rights to access, rectification, erasure, restriction, portability, and objection. Where we rely on consent, you can withdraw it at any time.

11. California privacy rights (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect and how we use and share it, to request access to or deletion of that information, to correct inaccurate information, and to not be discriminated against for exercising these rights. We do not sell or share your personal information as those terms are defined under California law. To make a request, contact us using the details in section 13.

12. International transfers, children & third-party links

Our providers may process data in the United States and other countries, which may have different data-protection laws than yours. Where required, we rely on appropriate safeguards (such as standard contractual clauses). Forgely is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect their personal data; if you believe a child has provided us data, contact us and we will delete it. Our service may link to third-party sites we do not control and whose privacy practices we are not responsible for.

13. Contact & changes

Questions about your privacy, or want to exercise a data right? Reach us in our support server or by email at forgely.discord@gmail.com. We may update this policy from time to time; material changes will be communicated through the app or by email, and the “last updated” date above will change.