Privacy Notice — Post Forge

This Privacy Notice explains how Moss Interactive ("we", "us") collects, uses, and protects personal data when you use Post Forge (the "Service"). Moss Interactive is the data controller for the personal data described below.

1. Data We Collect

Account data — name, email, password hash, profile details.
Business context — business name, niche, tone preferences, and other inputs you submit to generate content.
Generated content & history — the outputs we produce for you and your interaction with them.
Support communications — messages you send to support.
Technical data — IP address, device identifiers, browser type, log data, and usage telemetry.
Cookies — see Section 8.

2. How We Use Your Data

Provide the Service — create your account, generate content, store history (legal basis: contract).
Security & fraud prevention — detect abuse, protect accounts (legitimate interests).
Customer support — respond to your questions (contract / legitimate interests).
Product improvement — analyze aggregate usage to improve the Service (legitimate interests).
Marketing — only with your consent, where required by law.
Legal compliance — meet tax, accounting, and regulatory obligations (legal obligation).

3. AI Model Providers

Prompts and inputs you submit are processed by third-party AI model providers through the Lovable AI Gateway to generate your content. We do not authorize these providers to use your prompts to train their public models.

4. Data Sharing

We share personal data with the following categories of recipients:

Service providers / subprocessors — hosting, database, email, analytics, and AI inference providers acting on our instructions.
Merchant of Record — Paddle.com processes payments, manages subscriptions, handles invoicing, and ensures tax compliance for sales of the Service. Paddle acts as an independent controller for the payment data it collects.
Professional advisers — legal, accounting, and audit advisers under confidentiality.
Authorities — where required by law or to protect our rights.

5. International Transfers

Our service providers may be located outside your country, including outside the UK/EEA. Where data is transferred, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

6. Data Retention

We retain personal data for as long as your account is active and for a reasonable period afterwards to comply with legal obligations, resolve disputes, and enforce our agreements. Generated content history is retained for the lifetime of your account unless you delete it. When data is no longer needed, we delete or anonymise it.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you;
Request correction of inaccurate data;
Request deletion ("right to be forgotten");
Restrict or object to processing;
Receive your data in a portable format;
Withdraw consent at any time (where processing is based on consent);
Lodge a complaint with your local supervisory authority.

To exercise these rights, contact us through the in-app support channels. We aim to respond within one month.

8. Cookies

We use essential cookies for authentication and security, and may use analytics cookies to understand how the Service is used. You can control non-essential cookies through your browser settings.

9. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and regular security reviews. No system is completely secure; please use a strong, unique password.

10. Children

The Service is not directed at children under 16. We do not knowingly collect data from children.

11. Changes

We may update this Notice from time to time. Material changes will be communicated via the Service or by email.

12. Contact

Questions or requests regarding your personal data? Contact Moss Interactive through the in-app support channels.