Forgeform

Legal · Forgeform

Privacy Policy

This policy explains what personal data Forgeform collects, why, who we share it with, how long we keep it, and the rights you have under UK GDPR, EU GDPR and the CCPA.

Last updated · 13 July 2026

01Who is responsible

GDKOS LIMITED (“Forgeform”, “we”, “us”) is the data controller for personal data processed through gdkosuk.shop. Our registered address is 8 Wester Balmanno Way, Marykirk, Kincardineshire, AB30 1TE, United Kingdom. You can reach our privacy contact at support@gdkosuk.shop or +44 7542701899.

Forgeform is an online-only digital subscription tool that turns object descriptions into design concepts, renders and turntable clips. We do not sell physical goods and do not provide engineering, manufacturing, legal, medical or financial services.

02What we collect

  • Account data — email address and authentication identifiers when you create an account.
  • Tool input — the object descriptions, briefs, parameters and any reference sketches or images you upload.
  • Generated results — the briefs, renders, boards and clips produced for you.
  • Subscription and billing data — plan, billing status and the last four digits and card brand returned by our payment processor. We never receive or store full card numbers.
  • Support data — messages you send us through the contact and Studio request forms.
  • Technical data — IP address, device and browser type, and usage/diagnostic events.

03Where it comes from

We collect data directly from you (forms, tool input, account setup), automatically from your device (cookies and server logs), and from our payment processor (billing status and card metadata). We do not buy personal data from third parties.

04Why we use it and legal bases

  • Provide the service — generate briefs, renders and clips, and deliver exports (performance of a contract).
  • Billing — manage subscriptions and invoices (performance of a contract; legal obligation for tax records).
  • Support and security — answer requests, prevent abuse and secure the platform (legitimate interests).
  • Service improvement and analytics — understand aggregate usage (legitimate interests; consent where required for non-essential cookies).
  • Legal compliance — meet accounting, tax and law-enforcement obligations (legal obligation).

We do not use your inputs or generated results to train AI models. Inputs are processed only to produce your outputs and run the service.

05Who we share it with

We share data only with processors that help us run the service, under contract:

  • Hosting and delivery — our cloud hosting and content-delivery provider.
  • Payments — our PCI-compliant payment processor handles card data; we receive only status and card metadata.
  • Database and file storage — for accounts, inputs and generated assets.
  • AI generation provider — processes your prompt and reference material to produce concepts and renders.
  • Email — for transactional and support messages.

We also disclose data where required by law, or to protect our rights, users and the public.

06International transfers

Some processors operate outside the UK/EEA. Where personal data is transferred internationally, we rely on adequacy decisions or Standard Contractual Clauses (with the UK Addendum where relevant) to protect it.

07How long we keep it

  • Account data — while your account is active, then deleted or anonymised within 90 days of closure.
  • Tool input, uploads and generated results — cached to run the service and deleted within 30 days unless you save them to your account; you can delete them sooner.
  • Billing records — retained for the period required by tax and accounting law.
  • Support messages — retained up to 24 months.

08Your rights (UK GDPR, EU GDPR, CCPA)

Depending on where you live, you can request to:

  • Access, correct, port or delete your personal data.
  • Restrict or object to certain processing, and withdraw consent at any time.
  • Know what categories of personal information we collect, use and disclose (CCPA).
  • Not be discriminated against for exercising your rights.

Email support@gdkosuk.shop to exercise any right. We respond within the statutory timeframe. UK/EU users may complain to their supervisory authority (in the UK, the Information Commissioner’s Office).

09Do Not Sell or Share

We do not sell your personal information and do not share it for cross-context behavioural advertising. If this ever changes we will provide a clear opt-out first.

10Cookies and analytics

We use essential cookies for authentication and security, and limited analytics to improve the service. See our Cookie Policy for details and choices.

11Automated decisions and children

Generation is automated but produces concept suggestions for your review; it does not make legal or similarly significant decisions about you. Forgeform is not for anyone under 13. Users aged 13–17 must have verifiable guardian consent, as set out in our Terms.

12Contact and changes

We may update this policy and will change the “last updated” date above. Material changes will be notified in-app or by email. Questions: support@gdkosuk.shop.

Questions about this policy?

GDKOS LIMITED, 8 Wester Balmanno Way, Marykirk, Kincardineshire, AB30 1TE, United Kingdom. Email support@gdkosuk.shop or call +44 7542701899. See our Support page for response times.