Privacy Policy

Effective date: February 23, 2026

This Privacy Policy describes how Forgecraft ("Service", "we", "us") collects, uses, and protects personal data when you use the website forgecraft.io and related services.

1. Who We Are

Forgecraft provides managed AI agent hosting — infrastructure that lets you run open-source AI agents (Moltis, OpenClaw) via Telegram and the web without managing servers yourself.

The operator of personal data is:

  • Individual Entrepreneur Roman Borisovich Belov (ИП Белов Роман Борисович)
  • Tax ID (ИНН): 770871362722
  • Registration number (ОГРНИП): 322774600177836
  • Legal address: 107140, Moscow, Russia
  • Contact email: support@forgecraft.io

2. Data We Collect

2.1 Website Analytics

We use Google Analytics 4 and Yandex.Metrika to understand how visitors use our site. These services set cookies only after you provide consent via our cookie banner. Data collected includes: anonymised IP address, browser type, operating system, pages visited, and session duration.

Cookies set by these services:

  • _ga — Google Analytics unique user identifier (2 years)
  • _ga_* — Google Analytics session state (2 years)
  • _gid — Google Analytics session tracking (24 hours)
  • _ym_uid — Yandex.Metrika unique user identifier (1 year)
  • _ym_d — Yandex.Metrika first visit date (1 year)
  • _ym_visorc — Yandex.Metrika session recording (30 minutes)

2.2 Payment Data

Payments are processed by Tinkoff (Russia) and Telegram Stars (international). We do not store card numbers, CVV codes, or full payment credentials. We retain only transaction metadata (amount, date, status) for accounting purposes.

2.3 Conversation Data

Messages you send to AI agents are stored on our servers and transmitted to AI model providers (OpenAI, Anthropic) to generate responses. We store conversation history for the duration of your active subscription plus 30 days after cancellation.

Important: We access AI models via their API (business) plans. Under these terms, OpenAI and Anthropic do not use your data to train their models. Your conversations are processed solely to generate responses and are not retained by these providers for training purposes.

2.4 Account Data

We collect your email address and, where applicable, your Telegram user ID for account management, authentication, and support communications.

3. How We Use Your Data

  • Delivering and maintaining the Service
  • Processing payments and managing subscriptions
  • Analysing website usage to improve the Service
  • Responding to support requests
  • Ensuring security and preventing abuse
  • Complying with legal obligations

4. Third Parties We Share Data With

We share data only to the extent necessary to deliver the Service:

  • OpenAI, Inc. (USA) — processes conversation messages to generate AI responses (GPT models). Privacy Policy
  • Anthropic, PBC (USA) — processes conversation messages when Claude models are used (BYOK). Privacy Policy
  • T-Bank / Tinkoff (Russia) — processes payments for Russian subscribers. Privacy Policy
  • Telegram FZ-LLC (UAE) — bot delivery platform and Telegram Stars payments. Privacy Policy
  • Google LLC (USA) — website analytics via Google Analytics 4. Privacy Policy
  • Yandex LLC (Russia) — website analytics via Yandex.Metrika. Privacy Policy

We do not sell, rent, or share personal data with third parties for marketing purposes.

5. Data Storage and Security

Your data is stored on servers located in European data centres and within the Russian Federation. In accordance with Russian Federal Law No. 152-FZ, the initial collection and storage of personal data of Russian citizens is performed on servers located in Russia. We apply industry-standard safeguards: TLS encryption in transit, encryption at rest, isolated agent containers, and restricted staff access on a need-to-know basis.

No method of transmission over the internet is 100% secure. We take all reasonable precautions but cannot guarantee absolute security.

6. Your Rights

You have the right to:

  • Access — request a copy of the personal data we hold about you
  • Correction — ask us to correct inaccurate or incomplete data
  • Deletion — request erasure of your personal data
  • Portability — receive your data in a structured, machine-readable format
  • Withdraw consent — opt out of analytics cookies at any time via our cookie banner
  • Object — object to processing based on legitimate interest

To exercise any of these rights, contact us at support@forgecraft.io. We will respond within 30 days.

7. Russian Federal Law No. 152-FZ Compliance

We comply with the Russian Federal Law "On Personal Data" (No. 152-FZ dated 27 July 2006). Legal bases for processing:

  • Performance of a contract (Art. 6, para. 5) — to deliver paid services
  • Consent (Art. 6, para. 1) — for analytics cookies, obtained via the cookie banner
  • Legitimate interest — to ensure security and service integrity

Cross-border data transfers to the USA (OpenAI, Anthropic, Google) and UAE (Telegram) are conducted based on user consent expressed by accepting this Policy, in accordance with 152-FZ requirements.

8. GDPR (European Users)

If you are located in the European Economic Area, additional rights apply under the General Data Protection Regulation (GDPR). Our legal bases for processing are: performance of a contract, consent (for analytics), and legitimate interests (security). We apply data minimisation principles and retain data only as long as necessary. You have the right to lodge a complaint with your local supervisory authority.

9. Children

The Service is not intended for users under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently received data from a child, please contact us immediately for deletion.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The current version is always available on this page with the effective date shown at the top. Continued use of the Service after changes are published constitutes acceptance of the updated Policy.

11. Contact