Privacy Policy
Last updated: August 3, 2026
1. Information We Collect
We collect basic information needed to provide the service, such as account email, submitted links, uploaded files, order records, device details, and service logs.
2. How We Use Information
We use this information for account access, order processing, media processing, history display, support, security, abuse prevention, and service improvement. We do not sell your personal information.
3. Storage of Processed Content
To complete requested jobs, we may temporarily store uploaded files, intermediate processing files, and outputs, then delete them after a limited retention period. Except where required by law or service security needs, we do not retain processed content long-term. You may request deletion via [email protected].
4. Third-Party Sharing and Disclosure
We share personal information only when needed to operate the service: authentication providers may process sign-in credentials and account details; security and infrastructure providers may process IP address, device, and request data; third-party payment service providers may process account, order, billing, and payment data when you purchase a plan; and analytics providers may process limited device, usage, and service-log data on our behalf. These providers may use the data only to deliver their services and prevent fraud under their own privacy terms. We may also disclose information when required by law, to protect rights and safety, or as part of a merger or transfer with appropriate safeguards. We do not sell personal information or share it for third-party advertising.
4.1 Payment Processing Services
When you purchase a plan, we share the account identifier, email address, order number, transaction amount, currency, payment status, and necessary billing details with third-party payment service providers to create orders, process payments and refunds, issue billing records, handle taxes, and prevent fraud. Full payment credentials such as card numbers and security codes are collected and processed directly by the payment provider; we do not receive or store those full credentials on our servers.
4.2 Cloud Infrastructure, Security, and Content Processing
Cloud infrastructure, storage, content-delivery, and security providers may process IP addresses, device and request data, uploaded or generated files, and service logs to host and deliver the service, temporarily store and process submitted content, secure the network, prevent abuse, and troubleshoot failures. We share only the minimum data needed for those tasks and require appropriate confidentiality and security safeguards.
4.3 Analytics and Authentication Services
Analytics providers may process limited device details, page visits, feature usage, performance data, and error logs to measure usage, monitor reliability, and improve the product; this data is not shared for third-party targeted advertising. If you choose third-party sign-in, authentication providers may process your email address, account identifier, authorization profile, and sign-in token only to verify identity, create or link an account, and secure access.
5. Desktop App Diagnostic Logs
The DownForge desktop app keeps a local log to troubleshoot download, recording, and licensing failures. Logs may include the media URL involved in an error, local file names, error details, and your app version and operating system. Logs stay on your device by default, and URLs, file paths, and credentials are masked when shown in the app. They are uploaded to us only in two cases: you tap “Report” on an entry, or you enable “Auto-report error logs” in Settings (off by default). What is uploaded is the unmasked log content, linked to your account and device identifier, used solely for troubleshooting and deleted automatically after 90 days. You can turn off auto-reporting at any time in Settings.
6. Your Data Rights
Subject to applicable law, you may request information about the personal data we collect and use; access and obtain a copy of it; correct inaccurate or incomplete data; request deletion; restrict certain processing; receive data in a structured, machine-readable format and request portability; object to processing based on legitimate interests or direct marketing; and withdraw consent at any time. Withdrawal does not affect processing lawfully completed before withdrawal. To close your account, sign in and go to Profile → Delete Account. For access, correction, deletion, or another rights request, email [email protected]. We may verify your identity to protect your account and will respond within 30 calendar days after receiving a complete valid request. If applicable law permits an extension, we will explain why and provide an expected response date. You may complain to the competent data-protection authority where you live if you believe your request was not handled properly.
7. Contact
If you have questions about privacy practices, data handling, deletion requests, or compliance, please contact us at [email protected].