Forgelix

Legal

Privacy Policy

Last updated 23 October 2026

This policy explains what personal data Forgelix handles, why, and what you can ask us to do with it. It covers three groups: visitors to forgelix.com, customers who subscribe, and visitors to our customers’ websites.

Who is responsible

Ievgenii Muran, Spain, operates Forgelix and is responsible for the data of visitors to forgelix.com and of customers. For visitors to a customer’s website, the customer decides why and how their data is used, and we process it on the customer’s behalf. Contact: support@forgelix.com.

Visitors to forgelix.com

This website runs our own chat assistant. When you open a page, our script records the page view and how you use the chat, and it keeps a random identifier in your browser’s storage so we can tell that it is the same browser again. The chat uses browser storage, not cookies. Some visitors are not shown the chat, so that we can measure whether it helps; their page views are recorded in the same way.

If you write in the chat, your message is sent to AI model providers to write and check the reply. Before that, we mask secrets such as keys, passwords and card numbers, and we do not store them. We keep the conversation so the assistant can continue it and so we can improve the service. Please do not type personal data you do not want processed.

Our legal basis is our legitimate interest in running and improving Forgelix. You can clear the browser storage of forgelix.com in your browser settings at any time, which resets the identifier. If you want the data linked to it deleted, or want us to stop, write to us.

Customers

When you subscribe we handle these data:

  • your email address, and your account sign-in (a password that we store only as a one-way hash);
  • your plan, subscription status, trial and billing dates, and your Stripe customer ID;
  • how many chats your websites used.

You enter your card on Stripe’s page, and we never see or store your full card number. We keep a one-way hash of your email address to remember that it has used the free trial. The panel uses two cookies: one keeps you signed in, and one recognises a known device at sign-in.

We use this data to provide the service you pay for, to send account and billing emails (the set-password link, the trial reminder, failed-payment and dispute notices), to prevent repeated use of the trial, and to meet accounting and legal duties. Our legal bases are our contract with you, our legal obligations, and our legitimate interest in stopping abuse of the trial. Without your email address we cannot create your account.

Visitors to our customers’ websites

Customers install our script on their sites. We process page views, chat messages and any contact details a visitor chooses to give, in order to run the assistant for that customer. The customer is responsible for telling its visitors about this and for asking for consent where the law requires it. Secrets such as keys, passwords and card numbers are masked before any AI call and are never stored. Technical records of chat turns and message delivery are kept for 365 days and then deleted.

A visitor can ask in the chat for a person from the customer’s team. A visitor can also leave an email address so that the customer can follow up. We save that address for the customer only after the visitor ticks a consent box, and the visitor can withdraw that consent at any time, which ends the follow-up.

If you are a visitor and want to use your rights, ask the website owner. If you write to us, we pass your request to the website owner, who decides on it.

Who receives data

  • Stripe: payments and billing.
  • Resend: sends our emails.
  • Hetzner Online GmbH: hosting. Our servers are in Falkenstein, Germany.
  • Ollama (ollama.com) and TypeSafe: AI model providers that write replies and check messages for safety.
  • Telegram: only if a visitor or customer chooses a Telegram channel.

These providers process data for us. Some of them may process it outside the EU and the EEA, for example in the United States. Where a provider does, the transfer must rest on an adequacy decision (such as the EU–US Data Privacy Framework) or on standard contractual clauses, and you can write to us to ask what applies to a provider. We email our customers before a new provider receives their visitors’ data. We do not sell personal data. We give data to authorities only where the law requires it.

How long we keep data

  • Account and billing records: while your account is active, and afterwards as long as accounting or other law requires.
  • Conversations: kept while the customer uses Forgelix, and deleted when the customer or the visitor asks us to.
  • Technical records of chat turns and delivery: 365 days.
  • The trial hash: kept so that a trial cannot be repeated. It is personal data, so we delete it on a valid request unless it is still needed to stop abuse.

Security

All traffic uses HTTPS. Card data stays with Stripe. Secrets are masked before AI calls. Access to our systems is limited to the people who need it. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to limit or object to its use, or to move it. Write to support@forgelix.com from the address concerned, and we reply within 30 days. You can also complain to your data protection authority. In Spain this is the AEPD (aepd.es).

Children

Forgelix is a business service and is not meant for children.

Changes

We post changes here and update the date above. For material changes we also email our customers.