Privacy Policy

Last updated: January 31, 2026

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Email address: Used for login, notifications, and account recovery
• Password: Encrypted and never stored in plain text
• Name: Optional, used for personalization
• Subscription tier: Determines your plan and enabled features
• Payment information: Processed securely by our payment provider (we do not store credit card numbers)

1.2 Content You Upload

When you use the Service, you have to upload your Preferred audio files to generate content, including:

• Audio files: Podcast episodes you upload for transcription and processing
• Transcriptions: Text versions of your audio generated by AI
• AI-generated content: Blog posts, social posts, lead magnets, and other outputs
• Episode metadata: Titles, descriptions, timestamps, and related inputs you provide

1.3 Usage Data

We may automatically collect certain usage and device data, such as:

• Log data: IP address, browser type, device information
• Usage metrics: Features used, credits consumed, session duration
• Performance data: Error reports, loading times, API response times
• Analytics: Aggregate usage patterns to improve the Service

1.4 Cookies & Tracking

We may use cookies and similar technologies for:

• Authentication: Keeping you logged in
• Preferences: Remembering your settings
• Analytics: Understanding how you use ForcaLabs
• Security: Preventing fraud and abuse

2. How We Use Your Information

2.1 Primary Uses

• Provide the Service: Process your audio, generate content, store your data
• Authentication: Verify your identity and manage your account
• Billing: Process payments and manage subscriptions
• Communication: Send transactional emails, updates, and support messages
• Improvements: Analyze usage to enhance features and performance
• Security: Detect and prevent fraud, abuse, and security threats
• Legal compliance: Fulfill legal obligations and enforce our Terms

2.2 Marketing Communications

3. Third-Party Services

3.1 AI Processing Partners

We use AI providers to process your content and generate outputs.

3.2 Infrastructure & Tools

We may use infrastructure providers to operate and secure the Service, including:

• Supabase: Database and authentication services
• Vercel: Hosting and deployment
• Paddle: Payment processing and subscription management

4. Data Security

4.1 Security Measures

We implement security practices designed to protect your data, including:

• Encryption: Data transmitted using TLS/SSL encryption
• Password security: Passwords hashed using modern hashing methods
• Access controls: Restricted access to internal systems
• Monitoring: Monitoring and alerts to detect suspicious activity
• Operational safeguards: Processes intended to prevent unauthorized access

4.2 Data Breach Protocol

In the unlikely event of a data breach:

• We will notify affected users within 72 hours where required and feasible
• We will report to relevant authorities as required by law
• We will provide details about what data was compromised, to the extent known
• We will offer guidance on protective measures you can take

5. Data Retention

5.1 How Long We Keep Your Data

• Active accounts: Data retained as long as your account remains active
• Canceled subscriptions: Data may be retained for up to 30 days, then deleted
• Deleted accounts: Data deleted within 30 days (unless legal retention is required)
• Billing records: Retained for up to 7 years for tax and legal compliance
• Log/security data: Retained for up to 90 days for security and debugging

6. Your Privacy Rights

6.1 You Have the Right To

• Access: Request a copy of personal data we have about you
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and personal data
• Export: Download your content in supported formats
• Opt-out: Unsubscribe from marketing communications
• Restrict processing: Limit certain processing where applicable
• Object: Object to certain processing based on legitimate interests where applicable

6.2 How to Exercise Your Rights

To exercise any of these rights, contact us at hello@forcalabs.com. We will respond within 30 days.

7. Children’s Privacy

7.1 Age Restriction

8. International Users

8.1 Data Transfers

ForcaLabs is based in India. If you access the Service from outside this jurisdiction, your data may be transferred to and processed in [Your Jurisdiction]. By using ForcaLabs, you consent to this transfer.

We implement reasonable safeguards intended to protect your data consistent with this Privacy Policy.

9. Changes to This Policy

9.1 Updates

We may update this Privacy Policy from time to time. If we make material changes:

• We will notify you via email at least 30 days in advance where required
• We will post the updated policy on this page
• We will update the “Last updated” date at the top
• Continued use of the Service after changes take effect constitutes acceptance

10. Contact

10.1 Questions & Requests

• Email: hello@forcalabs.com
• Response time: Typically within 48 hours
• Data protection requests: Available upon request