Privacy Policy

This Privacy Policy explains how personal data is collected, used, and protected when you use AssetForge.

1. Data we collect, and why

Account data (all users)

When you sign up via Firebase Authentication using email/password, we collect your email address. If you choose to sign in using Google instead, we receive basic profile information that you choose to share with us, such as your email address, display name, and profile picture (if available). This is used to create and secure your account, and is stored in our database (Firestore) linked to your unique account ID.

Legal basis: performance of a contract (providing you with an AssetForge account and access to the marketplace).

Creator data

If you upload Content as a Creator, we additionally store:

• The clip itself, its title, description, tags, location text, and price you set.
• A reference ID linking your account to your Stripe Connect account, so you can receive payouts. We do not see or store your bank account number, sort code, or identity documents - these are collected and held directly by Stripe as part of their own onboarding process.

Legal basis: performance of a contract, and our legitimate interest in operating the marketplace.

Buyer / purchase data

When you purchase a clip, a purchase record is created containing the asset purchased, the amount paid, and a reference to your account. Payment itself - including your card details - is handled entirely by Stripe via their own hosted checkout; we do not receive or store your full card number.

Legal basis: performance of a contract, and our legal obligation to keep transaction records.

Content of uploaded footage

Because AssetForge's Content consists of real-world video footage, it may incidentally contain personal data of third parties (for example, people visible in a public street shot). Creators are required, under our Shooter Guidelines and Terms of Service, to avoid clear identifiable close-ups of individuals and readable vehicle number plates. We do not currently run automated scanning of uploaded footage to detect personal data - Content review currently relies on Creator self-certification, our published guidelines, and manual review of any reports we receive.

B2B enquiries ("Request a clip")

If you submit a custom clip request, we collect the agency/company name, work email address, the location and shot description you provide, and an optional deadline. This is used solely to follow up on your enquiry and, where relevant, to brief a Creator.

Legal basis: legitimate interest in responding to a business enquiry you have initiated.

Technical information

When you use AssetForge, we may automatically collect limited technical information such as your IP address, browser type, device information, and server logs generated by our infrastructure (including Firebase and Cloud Functions), for security, fraud prevention, troubleshooting, and maintaining the platform.

Legal basis: our legitimate interests in maintaining the security and reliability of AssetForge.

2. Third parties we share data with

We do not sell personal data to third parties, and we do not use any advertising or marketing tracking services on AssetForge at this time.

3. International data transfers

Some of our service providers, including Google (Firebase) and Stripe, may process personal data outside the United Kingdom. Where this happens, they use appropriate safeguards - such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or another lawful transfer mechanism - to protect your personal data.

4. How long we keep data

We retain account and transaction data for as long as your account remains active, and afterward for as long as reasonably necessary to meet our legal and tax record-keeping obligations. Uploaded Content remains on the platform until you delete it (via your dashboard) or until we remove it under our Terms of Service. We do not currently operate an automatic data-deletion schedule beyond these events.

5. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you;
• Ask us to correct inaccurate data;
• Ask us to delete your data, subject to our legal obligations to retain transaction records;
• Object to or restrict certain processing;
• Request a copy of your data in a portable format.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), although we'd appreciate the opportunity to resolve your concerns first.

6. Security

Access to your data in Firestore and Firebase Storage is controlled by security rules that restrict who can read or write each piece of data - for example, your original unwatermarked footage is never readable directly by other users, only via our backend systems after a completed, verified purchase. Data transmitted between your browser and AssetForge is encrypted using HTTPS/TLS. Payment and bank details are never handled directly by AssetForge - they are managed entirely within Stripe's own secure infrastructure.

7. Cookies and local storage

See our separate Cookies Policy for details of what's stored in your browser.

8. Automated decision-making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on you.

9. Children

AssetForge is not directed at children, and we do not knowingly collect personal data from anyone under 18. Creators must be legally able to enter into a contract and to receive payment via Stripe Connect, which itself requires the account holder to be an adult.

10. Changes to this policy

We may update this Privacy Policy as AssetForge's features change. We will update the "Last updated" date above whenever we do.

11. Contact us

For any privacy question, or to exercise any of the rights listed above, contact contact@originforgestudio.co.uk.