Privacy Policy

1. Introduction

TalkForge (“we,” “us,” or “our”) is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our Service at www.talkforgeconvos.com. This Policy is governed by the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Ontario privacy legislation.

By using the Service, you consent to the practices described in this Privacy Policy. If you do not agree with this Policy, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

We collect information you provide directly when you:

• Register for an account (name, email address, password or Google OAuth token)
• Subscribe to a paid plan (billing name, payment card details processed by Stripe — we do not store full card numbers)
• Create custom scenarios or characters
• Contact us for support
• Provide age verification information where requested

2.2 Information Collected Automatically

When you use the Service, we and our service providers automatically collect certain information, including:

• Log data: IP address, browser type, operating system, referring URLs, pages visited, and timestamps
• Device information: device type, unique device identifiers, and hardware model
• Usage data: session activity, scenario selections, performance scores, session duration, and feature interactions
• Cookies and similar tracking technologies (see Section 7)

2.3 Information We Do Not Collect

We do not collect or permanently store voice recordings from your practice sessions. Voice input is processed in real time to enable conversation functionality and is not retained after your session ends. We do not collect conversation transcripts unless you explicitly save them through a feature that makes this clear.

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Provide, operate, and improve the Service
• Process payments and manage subscriptions through Stripe
• Send transactional emails (account confirmations, password resets, billing receipts)
• Send service announcements and updates about TalkForge (you may opt out of non-transactional communications)
• Analyze usage patterns to improve features and user experience
• Detect and prevent fraud, abuse, and security incidents
• Respond to your inquiries and provide customer support
• Comply with our legal obligations
• Enforce our Terms of Service

4. Legal Basis for Processing

We process your personal information on the following legal grounds under PIPEDA and applicable law:

• Consent: where you have given us express or implied consent to process your information for a specific purpose
• Contract: where processing is necessary to perform a contract with you (e.g., delivering the subscription service you purchased)
• Legitimate interests: where processing is in our legitimate business interests and not overridden by your rights (e.g., fraud prevention, service improvement)
• Legal obligation: where we are required by law to process your information

5. Disclosure of Your Information

5.1 Third-Party Service Providers

We share your information with trusted third-party service providers who assist us in operating the Service, subject to confidentiality obligations:

• Stripe, Inc. — payment processing. Stripe processes your payment card information directly and is subject to PCI DSS compliance standards. Stripe's Privacy Policy is available at stripe.com/privacy.
• Google LLC — authentication services (Google OAuth). When you sign in with Google, Google shares limited profile information with us. Google's Privacy Policy is available at policies.google.com/privacy.
• Supabase, Inc. — database infrastructure and authentication. Your account data and usage information are stored on Supabase-hosted infrastructure. Supabase's Privacy Policy is available at supabase.com/privacy.
• OpenAI, LLC — AI conversation generation, voice transcription, and image generation. Conversation inputs may be transmitted to OpenAI for real-time response generation. OpenAI's Privacy Policy is available at openai.com/policies/privacy-policy.
• Resend — transactional email delivery. Your email address is shared with Resend solely to send account-related emails.

5.2 Other Disclosures

We may also disclose your information:

• To comply with a legal obligation, court order, or lawful request from a government authority
• To protect the rights, property, or safety of TalkForge, our users, or the public
• In connection with a merger, acquisition, or sale of all or substantially all of our assets (you will be notified of any such change)
• With your explicit consent

5.3 No Sale of Personal Information

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

6. Data Retention

We retain your personal information for as long as your account is active or as necessary to provide the Service. Specifically:

• Account information is retained until you delete your account, plus a 30-day grace period for recovery
• Payment records are retained for 7 years as required by Canadian tax and accounting law
• Session usage data (session counts, plan status) is retained for the duration of your account
• Log and security data is retained for up to 12 months

Conversation transcripts are not stored on our servers — they exist only in your browser during a session and are discarded when you leave. Upon deletion of your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

7. Cookies

We use essential cookies and browser local storage to maintain your session and authentication state. These are required for the Service to function. We do not use cookies for advertising, analytics, or cross-site tracking purposes. You can control cookies through your browser settings; disabling essential cookies will impair your ability to use the Service.

8. Data Security

We implement reasonable and appropriate technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption of data in transit using TLS/HTTPS
• Encryption of sensitive data at rest
• Access controls limiting access to personal information on a need-to-know basis
• Regular security assessments of our infrastructure

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security.

9. International Data Transfers

TalkForge is based in Ontario, Canada. Our service providers, including Stripe, Google, Supabase, and OpenAI, may process and store your data in the United States or other jurisdictions. When we transfer your personal information outside Canada, we take steps to ensure it receives an equivalent level of protection, including through contractual safeguards. By using the Service, you consent to this transfer.

10. Your Privacy Rights

Under PIPEDA and applicable Ontario law, you have the following rights regarding your personal information:

• Right of access: you may request a copy of the personal information we hold about you
• Right to correction: you may request that we correct inaccurate or incomplete information
• Right to withdrawal of consent: you may withdraw consent to certain processing at any time, subject to legal or contractual restrictions
• Right to deletion: you may request deletion of your personal information, subject to our legal retention obligations
• Right to data portability: you may request your data in a structured, machine-readable format
• Right to complain: you have the right to lodge a complaint with the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca

To exercise any of these rights, please contact us at support@talkforgeconvos.com. We will respond to verified requests within 30 days. We may need to verify your identity before processing your request.

11. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without verifiable parental consent, we will take steps to delete that information promptly.

Users between the ages of 13 and 18 may use the Service only with verifiable parental or guardian consent. If you believe we have inadvertently collected information from a minor, please contact us immediately at support@talkforgeconvos.com.

12. Marketing Communications

With your consent, we may send you promotional communications about TalkForge features, updates, and offers. You may opt out of marketing emails at any time by clicking the unsubscribe link in any marketing email or by contacting us at support@talkforgeconvos.com. You will continue to receive transactional emails related to your account regardless of your marketing preferences.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes by posting the updated Policy on the Service and updating the effective date. For significant changes, we will provide additional notice via email. Your continued use of the Service after changes take effect constitutes acceptance of the revised Policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

You may also contact the Office of the Privacy Commissioner of Canada: