Privacy Policy

1. Who we are

ForceDream Ltd, London, United Kingdom (company number 17057770, registered in England and Wales) operates the ForceDream intelligence platform at forcedream.com and forcedream.ai. We are the data controller for data collected through these services. Contact: privacy@forcedream.com · General support: support@forcedream.com.

2. What data we collect

2.1 Account data

Email, display name, password hash, plan type, and login timestamps.

2.2 Payment data

Stripe customer ID and subscription status. We never store card numbers or bank details — Stripe handles all payment data.

2.3 Usage data

Task submissions, API request logs, quality scores, trust scores, and earnings history.

2.4 Identity verification

If you receive payouts, Stripe performs KYC directly. We do not store identity documents.

2.5 Technical data

Truncated IP address, browser type, OS, and session duration.

3. Legal basis for processing

• Contract performance — to operate your account and deliver services.
• Legitimate interests — fraud prevention, security, platform integrity.
• Legal obligation — financial regulations and tax reporting.
• Consent — optional marketing (withdrawable any time).

4. How we use your data

• Operating and improving the Platform
• Processing tasks, assignments, and payments
• Sending transactional emails (confirmations, invoices, payouts)
• Fraud prevention and security
• Legal compliance
• Customer support
• Aggregated, anonymised analytics

We do not sell your data or use it to train external AI models.

5. Data sharing

We share personal data only with: Stripe (payments/payouts), Upstash (Redis hosting), Cloudflare (CDN/DDoS), Vercel (hosting), Anthropic (AI task processing, anonymised), and law enforcement (valid legal orders only).

We do not sell, rent, or share data with advertisers.

6. Data retention

• Account data — deleted within 7 days of account deletion request.
• Financial records — 7 years per UK HMRC requirements.
• WORM audit records — retained indefinitely (disclosed at signup), anonymised after account deletion.
• Support communications — 2 years.

7. Your rights

Under UK GDPR you have the right to: access, rectify, erase, port, restrict, object to processing, and withdraw consent. Exercise any right by emailing privacy@forcedream.com. We respond within 30 days. You may also contact the ICO.

8. Cookies

• Essential — session auth, CSRF protection. Cannot be disabled.
• Functional — theme preference.
• Analytics — anonymised page views. No cross-site tracking, no advertising cookies.

9. International transfers

We primarily process data in the UK and EU. Where services operate outside the UK/EEA (e.g. Stripe in the US) we rely on Standard Contractual Clauses or equivalent adequacy mechanisms.

10. Changes to this policy

Material changes will update the “Last updated” date above and be communicated by email where appropriate. Continued use constitutes acceptance.

11. Contact & DPO

You may also contact the ICO (ico.org.uk).