Privacy Policy

1. Data Controller

AuthorForge is operated by Neochic Digital Ltd, a company registered in England & Wales. We are the data controller responsible for personal data processed through the service. For data protection enquiries, contact us via the email address shown in your account settings.

2. Personal Data We Collect

We collect the following categories of personal data:

• ›Account data: your name, email address, and assigned role.
• ›Billing metadata: subscription plan, usage, and payment status. Card details are handled by Stripe and are not stored by us.
• ›Content you upload: manuscripts, book metadata, cover images, character notes, and marketing copy.
• ›Sales and reader data you import or collect: subscriber emails, ARC applications and feedback commitments, reading preferences, sales records, and reader progress.
• ›Usage and analytics data: pages viewed, feature usage, device type, and IP address.
• ›Communications: support requests and messages you send us.

3. How We Use Your Data

We process your personal data to:

• ›Provide, maintain, and secure the AuthorForge service.
• ›Process subscription payments and manage your account.
• ›Send emails on your behalf (newsletters, lead-magnet deliveries, drip campaigns) via our email provider.
• ›Generate AI-assisted drafts, covers, and audiobook audio from content you provide.
• ›Sync with third-party integrations you connect (e.g. Google Calendar, Google Sheets).
• ›Manage ARC applications, invitations, assignments, deadlines, feedback, and future-offer eligibility.
• ›Provide support, troubleshoot, and improve the platform.

4. Legal Bases for Processing

We rely on the following legal bases under UK GDPR: (a) performance of a contract with you (to deliver the service and process payments); (b) your consent (e.g. analytics and non-essential cookies, which you can withdraw); (c) our legitimate interests (security, fraud prevention, and service improvement); and (d) compliance with legal obligations.

5. Data Sharing and Processors

We do not sell your personal data. We share data only with processors that help us run the service, under contract, including:

• ›Stripe — payment processing and subscription management.
• ›Google — integrations you explicitly connect (Calendar, Sheets).
• ›Resend — transactional and newsletter email delivery.
• ›ElevenLabs — text-to-speech / voice synthesis for audiobook features.
• ›Cloud hosting and infrastructure providers.

6. Subscriber and Reader Data

When readers sign up through a lead magnet, landing page, newsletter, or ARC application, their email and submitted details are stored in the relevant author's account and used to administer the request, reader relationship, or ARC programme. ARC applications do not create automatic book access. Optional marketing consent is collected separately from an ARC application and can be withdrawn. For author-controlled reader data, we act as a processor on the author's behalf; the author is the controller and is responsible for a lawful basis and compliance with applicable direct-marketing rules, including PECR.

7. International Transfers

Some of our processors operate outside the UK/EEA. Where personal data is transferred internationally, we rely on appropriate safeguards such as UK International Data Transfer Agreements or Addenda, or processors' approved binding safeguards.

8. Cookies

We use essential cookies to keep you signed in and security cookies to protect the service, plus optional analytics cookies. See our Cookie Policy for details and how to manage them.

9. Your Rights

Subject to certain conditions, you have the right to:

• ›Access the personal data we hold about you.
• ›Rectify inaccurate data.
• ›Erase your data (subject to legal retention duties).
• ›Restrict or object to processing.
• ›Receive your data in a portable format.
• ›Withdraw consent at any time (where we rely on consent).
• ›Lodge a complaint with the ICO (ico.org.uk).

10. Data Retention

We keep your data while your account is active and for as long as needed to provide the service. After account closure, we delete your data within 90 days, except where retention is required for legal, tax, or accounting purposes.

11. Security

We use encryption in transit, access controls, and regular reviews. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Children

AuthorForge is not directed at individuals under 16 (the UK GDPR age of consent). We do not knowingly collect data from children; if you believe we have, contact us and we will delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes take effect when posted with an updated effective date. Please review periodically.

14. Contact

To exercise your rights or ask questions about this policy, contact us via the email in your account settings. If you are unsatisfied with our response, you can complain to the UK Information Commissioner's Office at ico.org.uk.