Privacy Notice

Living Language Forge ("the Service") is operated by Venta Belgarum ("we", "us"). Venta Belgarum is the data controller for personal data processed in connection with the Service. This Privacy Notice describes what personal data we collect, why we collect it, who we share it with, and the rights you have.

We collect the following categories of personal data:

• Account data: name, email address, password hash, display name, profile image.
• Authentication data: login timestamps, identity provider identifiers (e.g. Google) when you use social sign-in.
• Content you create: language projects, lexicon entries, notes, prompts, AI outputs, and any other content you store in the Service.
• Support data: messages, attachments, and contact details you send when requesting support.
• Usage and telemetry: feature usage, AI action counts, credit consumption, error logs, approximate device and browser information, and IP address.
• Cookies and similar technologies: see Section 9.
• Billing information: limited billing metadata (e.g. plan, subscription status, transaction identifiers) shared with us by Paddle. Full payment card details are handled directly by Paddle and never reach our systems.

• Account creation and authentication — to register you, authenticate you, and secure your account. Legal basis: contract performance.
• Providing the Service — to host your projects, run AI generations, manage credits and subscriptions, and deliver features you request. Legal basis: contract performance.
• Security and fraud prevention — to detect abuse, prevent unauthorized access, and protect users. Legal basis: legitimate interests.
• Product improvement — to understand which features are used and improve them. Legal basis: legitimate interests.
• Customer support — to respond to your questions and resolve issues. Legal basis: contract performance / legitimate interests.
• Service announcements — to send transactional messages about your account, billing, or material changes. Legal basis: contract performance / legal obligation.
• Marketing — only where you have opted in or where permitted by law. Legal basis: consent or legitimate interests; you can opt out at any time.
• Legal compliance — to comply with applicable laws, tax obligations, and lawful requests. Legal basis: legal obligation.

When you use AI features, your prompts and the relevant project context are transmitted to our AI providers solely to generate the requested output. We do not use your prompts or outputs to train third-party models on your behalf. AI providers may process inputs as transient operational data in accordance with their own terms.

We share personal data only with the following categories of recipients:

• Hosting and infrastructure providers — for application hosting, databases, file storage, content delivery, and email delivery.
• AI model providers — to process your prompts and return generated outputs.
• Analytics and error monitoring providers — to operate, debug, and improve the Service.
• Paddle.com Market Ltd. and affiliates — our Merchant of Record. Paddle processes payments, manages subscriptions, calculates and remits applicable sales tax/VAT, issues invoices, and handles refunds and chargebacks on our behalf.
• Professional advisers — legal, accounting, and audit advisers under duties of confidentiality.
• Authorities — where required by law, court order, or to protect rights, safety, and security.

We do not sell personal data.

Personal data may be processed in countries outside the UK / EEA, including by service providers located in those countries. Where this happens, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions to protect your data.

We retain personal data for as long as your account is active and for as long as needed to provide the Service and comply with our legal obligations (for example, tax records). When data is no longer needed, we delete or anonymize it. You can request export or deletion of your account data at any time via the contact details in Section 11.

We apply appropriate technical and organizational measures to protect personal data, including encryption in transit, access controls, least-privilege principles for staff and infrastructure, and routine review of dependencies and configurations. No method of transmission or storage is completely secure; we work to remediate vulnerabilities promptly when identified.

We use a small number of cookies and similar technologies:

• Essential: required for sign-in, session management, and security. These cannot be disabled.
• Analytics: optional cookies that help us understand product usage in aggregate.
• Marketing: only used where you have consented.

You can manage cookie preferences in your browser settings. Disabling essential cookies will break authentication.

Depending on your jurisdiction, you may have the right to:

• access the personal data we hold about you;
• rectify inaccurate or incomplete data;
• erase your data ("right to be forgotten");
• restrict or object to certain processing;
• receive a copy of your data in a portable format;
• withdraw consent where processing is based on consent;
• lodge a complaint with your local data protection authority.

We aim to respond to verified requests within one month.

For privacy questions or to exercise your rights, contact Venta Belgarum through the support channel inside the Service or at the address published on our website. If you contact Paddle about a payment, they may share necessary details with us to resolve your request.

We may update this Privacy Notice from time to time. We will indicate the date of the most recent revision at the top of this page. Material changes will be communicated through the Service or by email where appropriate.