Privacy Policy

BrickForgerAI (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how your personal information is collected, used, and disclosed when you use our website and its associated subdomains (together, our “Service”). By using the Service, you agree to the collection, storage, use, and disclosure of your information as described here and in our Terms of Service.

• Company / we / us / our: BrickForgerAI.
• Country: BrickForgerAI is based in the United Kingdom.
• Device: any internet-connected device (phone, tablet, computer) used to access the Service.
• IP address: a number assigned to your device that can be used to estimate its general location.
• Personal Data: any information that, alone or combined with other information, identifies you.
• Service: the BrickForgerAI website and the generation service it provides.
• Website: https://brickforgerai.com/.
• You: the person registered with BrickForgerAI to use the Service.

Directly from you, when you register or use the Service:

• Email address
• Password (bcrypt-hashed before storage - we never store or see it in plain text)

As part of actually using the Service, we also store the text prompts you submit and the images, 3D meshes, and brick models generated from them, so you can revisit and re-download your own results. If you subscribe to a paid plan or make a purchase, we store an internal Stripe customer reference ID so we can recognize your account on future purchases - never your card number or other payment details, which Stripe holds directly (see below).

• To provide the Service - generating and storing your models, and authenticating your account
• To respond to support requests you send us
• To understand how the Service is used and improve its functionality, reliability, and performance
• To enforce our Terms of Service, including our content restrictions

We do not send marketing emails or newsletters, and we do not use your email address for advertising or audience-targeting purposes of any kind. We also do not use your prompts or the models generated from them to train our own AI models.

Under the UK GDPR, we need a lawful basis to process your personal data. Depending on the circumstances, we process your information because:

• Contract: processing is necessary to provide the Service you request, including creating and storing your account, generating models, and processing purchases.
• Legitimate interests: processing is necessary for our legitimate interests in maintaining, securing, improving, and protecting the Service, provided those interests are not overridden by your rights.
• Legal obligations: where processing is necessary to comply with applicable law.

We do not generally rely on consent to process the personal data necessary to provide the Service.

We do not sell your personal information, and we do not share it with advertisers, marketing partners, or ad networks - we don't have any. We do share the minimum necessary data with the service providers that make the Service work:

• Your prompt is used to generate a reference image via a third-party AI image-generation service
• That image is used to generate a 3D model via a third-party AI 3D-generation service
• Railway hosts our servers, database, and job queue
• Cloudflare R2 stores your generated files
• Sentry receives error/crash reports to help us fix bugs - this can include request metadata such as your IP address, but never your password
• Stripe processes payments if you subscribe to a paid plan, buy a credit top-up, or unlock instructions - your card details go directly to Stripe and never touch our own servers; we only receive confirmation that a payment succeeded and which plan or product it was for

We may also disclose information where required to comply with a legal obligation, court order, or valid request from a public authority, or to protect the rights, property, or safety of BrickForgerAI, our users, or the public. If BrickForgerAI is ever acquired or merged with another company, your information may be transferred as part of that deal, subject to this Policy.

We use reasonable technical and organizational measures to protect your information, including encrypted connections (HTTPS/TLS) and hashed password storage. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security of any information you send us.

BrickForgerAI is based in the United Kingdom. Some of our service providers may process or host information outside the UK. Where personal data is transferred internationally, we take appropriate steps to ensure it receives a level of protection consistent with applicable data protection law, including through adequacy regulations, approved contractual safeguards, or other legally recognised transfer mechanisms where required.

We keep your account and generated-model data for as long as your account is active. If you ask us to delete your account (see below), we'll remove your personal data within 30 days, except where we're required to keep something longer for legal reasons. Because this is an early-stage product without a fully built-out data pipeline yet, some backups may take longer to fully clear than our live systems.

Yes - contact us at the email below to update your account details or request deletion of your personal data. There isn't a self-service “delete my account” button in the product yet, so this is currently handled manually on request; we aim to action deletion requests within 30 days.

We do not use cookies. The Service uses your browser's local storage to keep you signed in and remember your preferences (like light/dark mode and your last build-size choice) - this data stays on your device and is never included in a request header the way a cookie would be. If you make a purchase, you'll be taken to Stripe's own checkout page to complete it - that page is on Stripe's domain, not ours, and Stripe's own cookie and privacy practices apply there.

BrickForgerAI is not directed at, and we do not knowingly collect personal information from, anyone under the age of 13. If you believe a child has provided us with personal data, please contact us and we'll remove it.

The Service may link to other websites not operated by us (for example, BrickLink or Studio). We're not responsible for the content or privacy practices of any third-party site, and this Policy doesn't apply once you leave our Service.

If you're in the UK or the European Economic Area, the GDPR (and UK GDPR) gives you rights over your personal data, including the right to access, correct, delete, restrict, or port the data we hold about you. You can exercise any of these rights by contacting us at the email below - we'll respond within one month. We do not sell personal data, and we only collect what's needed to provide the Service.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe your personal data has been handled unlawfully. We'd appreciate the opportunity to address your concerns first, but you're free to contact the ICO directly.

If you're a California resident, you have the right to know what categories of personal information we collect and why (see above), the right to request deletion of your account and associated data, and the right to equal service regardless of whether you exercise these rights. We do not sell personal information. To exercise any of these rights, contact us below - we'll respond within one month.

We may update this Policy as the Service changes. We'll post the updated version here with a new “last updated” date; continued use of the Service after a change means you accept the update. If you don't agree with an update, you can stop using the Service and contact us to request account deletion.

Questions about this Policy, or a request to access, correct, or delete your data? Email help@brickforgerai.com.