01Who we are
ForgeCast (the desktop app, the website at forgecast.in, its marketplace and API) is run by an individual based in India. For the personal data described here we are the "data fiduciary" under India's Digital Personal Data Protection Act, 2023 (the DPDP Act).
Contact for anything in this policy: support@forgecast.in. Our grievance officer details are in the last section.
02What we collect
We collect only what ForgeCast needs to work. Most of it you give us by using it.
| What | Details | Why |
|---|---|---|
| Your account | Name, email address and profile picture from Google or Discord when you sign in, and the plan you are on. | To sign you in, show your account and apply your plan. |
| Sign-ins | Website sessions; for the desktop app, the computer's name and when it signed in and was last active. Tokens are stored as hashes. | To keep you signed in and let you sign computers out. |
| Your YouTube channel | Channel ID, name, handle, picture and subscriber count. If you let ForgeCast post or run polls for you, Google's permission for that, encrypted. | To show your channel in the app and do what you ask on it. |
| What you make | Overlays, widgets and themes you design or add, pictures you upload, plugins you publish. | To store them and put them on your stream. |
| Cloud sync (Ultimate, if you turn it on) | A copy of the app's setup and history: chat actions, widgets, goals, Autopilot, stream history and reports, and app settings, with the name you gave the PC. | To keep your PCs the same. You can delete it at any time in the app. |
| Team seats (Ultimate) | The email address you invite, and once they join, which account is on your team. Your team members can see and edit your overlays, widgets and pictures. | To let the people you chose work on your overlays. |
| AI features | What you send to an AI feature (a description, stream details, chat lines for a summary or translation), its answer, and how many credits it used. | To run the feature and count credits. |
| Services you connect | For Spotify, Google or Discord: the account name or email shown to you and encrypted access tokens. For Ko-fi or Streamlabs tips: the tipper's name, amount and message. | To show tips on stream and let plugins use the services you chose. |
| API keys | The key's name, when it was made and last used. The key itself is stored as a hash. | To let your own tools use the ForgeCast API. |
| Messages to us | Feedback, bug reports and support emails. | To answer and improve ForgeCast. |
| Technical data | IP address, browser or app version and the pages or API calls requested; the country your request comes from. | Security, rate limits, fixing errors, and showing prices in your currency. |
| Payments | The plan, amount, currency, date and payment status, and Razorpay's ids for them. Card, UPI and bank details go to Razorpay, never to us. | To bill you, give receipts and handle refunds. |
We don't collect sensitive data such as health or financial account details, and we don't build advertising profiles.
03On your computer: the desktop app
Much of ForgeCast happens on your own computer, and stays there:
- Live chat, viewer counts and events are read from YouTube by the app on your computer.
- Your settings, chat history, stream history and reports, sounds, points and chat actions are saved in the app's folder on your computer, with daily backups there.
- Your sign-in tokens and passwords for OBS or other devices are kept in your operating system's credential store.
- Live captions are recognised by Windows' own speech recognition on your computer; ForgeCast only gets the words, to show them on your stream (and sends a line to the AI only if you turn on translation).
This data leaves your computer only when you use a feature that needs our servers or another service: for example an AI feature, posting to YouTube, cloud sync, or a plugin you allowed to use the internet.
Plugins run on your computer with the permissions you approve when installing them. Plugins marked "Community" are made by other people; read what a plugin asks for before you install it. Their makers are responsible for how their plugins use data.
04YouTube data
ForgeCast uses YouTube API Services. By using ForgeCast's YouTube features you agree to the YouTube Terms of Service, and Google's use of data is covered by the Google Privacy Policy.
- We access your channel's basic details, and, only if you allow it, permission to post messages and run polls in your live chat and update your stream's title.
- We use this data only to provide the ForgeCast features you use. We don't sell it or use it for advertising.
- We don't share it with anyone except Google itself and our hosting provider.
- You can remove ForgeCast's access at any time: disconnect under Connections, or in your Google account at security.google.com/settings/security/permissions. When you disconnect we revoke the permission at Google and delete the channel data we stored within 7 days.
05Why we use it
We use personal data:
- to provide what you asked for: your account, the app, the marketplace, AI features, the API and support;
- with your consent, which you give when you sign up, connect a service or use a feature, and can withdraw at any time;
- to keep ForgeCast secure and working: preventing abuse, enforcing limits and fixing bugs;
- to meet legal duties, such as tax records for payments or answering lawful requests.
We don't sell personal data, and we don't use it to train AI models.
08How long we keep it
- Your account and what you made: for as long as you have the account.
- When you delete your account: removed straight away from the live database, and from backups within 30 days.
- Desktop app sign-ins: until you sign the computer out, or 30 days after the app was last used.
- Tips from Ko-fi or Streamlabs: 30 days.
- Cloud sync: until you delete the cloud copy in the app, or delete your account.
- AI requests: what you sent is removed shortly after the job finishes; the result stays where you saved it.
- Security records (sign-ins, plan and account changes): as long as needed to protect your account and look into abuse.
- Payment records: as long as tax law requires (in India, usually 8 years).
09How we protect it
Everything travels over HTTPS. Passwords for other services and permissions from Google and others are encrypted; sign-in tokens and API keys are stored only as hashes. Access to the servers is limited to what is needed to run ForgeCast. No system is perfectly secure: if a breach affects your data we will tell you and the Data Protection Board of India as the law requires.
10Your rights
Under the DPDP Act and other laws that apply to you, you can:
- ask what personal data we have about you and how we use it;
- have it corrected, completed or updated;
- have it erased, for example by deleting your account under Settings;
- withdraw consent you gave (this doesn't affect what was done before);
- nominate someone to use these rights for you if you die or can't act yourself;
- complain to us, and if you aren't satisfied, to the Data Protection Board of India.
Email support@forgecast.in from the address you sign in with. We reply within 30 days, usually much sooner, and may ask you to confirm it's you.
11Children
You must be 18 or older to use ForgeCast, or have a parent or guardian agree to these terms and this policy for you. YouTube itself requires its users to be at least 13. If you believe a child has given us data without that consent, write to us and we will delete it.
12Changes to this policy
If we change this policy in a way that matters, we'll tell you by email or in the app before it applies. The date at the top always shows the latest version.
13Contact and grievance officer
For questions, requests or complaints about your personal data, write to our grievance officer at support@forgecast.in. We acknowledge within 48 hours and resolve within 30 days.
More ways to reach us are on the Contact page.
Questions about this policy?
Write to support@forgecast.in. We reply within 3 working days.