Privacy Policy

1.What we collect

We only collect what we need to run Fora:

• Your account: your email address, your name, and how you sign in (an email code or Google). From Google we receive your name, email and profile picture.
• Your page, if you run one: your link, name, photo, bio, products, lessons, files, events, prices and discount codes.
• What you buy, book and join: which products, calls, events and memberships, when, and what you paid.
• Payments: amounts and Stripe's references. Card details are entered into Stripe's form and go straight to Stripe. Fora never sees or stores full card numbers.
• Creators getting paid: your connected Stripe account's status (whether it can take payments and pay out) and country. Your bank and identity details stay with Stripe.
• Chats with a creator's AI assistant: the messages you send, the assistant's answers, any question you pass to the creator and the creator's reply. If you chat before signing in, the chat is linked to a cookie, and we keep a scrambled (hashed) form of your IP address to stop abuse. When you sign in, the chat moves to your account.
• How Fora is used: pages visited and key steps (such as starting checkout or creating a page), and, for some visits, a recording of what happens on screen with everything typed into fields hidden. We use this to find and fix what's confusing.
• Technical data: basic logs (such as IP address, browser and pages requested) that our hosting keeps for security and to fix problems.

2.How we use it

• To run Fora: sign you in, show your page, deliver what you buy, book calls and process payments.
• To email you about your account: receipts, bookings, trial reminders and important changes. We don't send marketing email without asking.
• To show creators who bought from them: your name, email, what you bought and when. Creators need this to deliver and support what they sell.
• To answer your questions with a creator's AI assistant, and to let that creator read the conversation and reply to you. We don't use your chats to advertise to you.
• To keep Fora safe: to prevent fraud and abuse and to enforce our terms.

3.Who we share it with

We don't sell your information. We share it only with the creators you buy from or chat with (as above) and with the companies that help run Fora:

• Supabase: our database, sign-in and file storage.
• Vercel: hosting for the website.
• Stripe: payments, payouts and Fora Pro billing.
• Resend: sending our emails.
• Mux: hosting lesson videos that creators upload.
• PostHog: product analytics and screen recordings that show how Fora is used (fields people type into are hidden).
• Google: if you choose to sign in with Google.
• Anthropic: runs the AI assistant. Your messages, the conversation so far and what the creator has told the assistant are sent to Anthropic to write each answer. Under its terms for businesses, Anthropic doesn't use them to train its models.

We may also share information when the law requires it, or to protect the rights and safety of people on Fora.

4.Cookies

Fora uses cookies to keep you signed in, to keep a chat with a creator's assistant before you sign in, to remember small settings, and for our own product analytics (PostHog) so we can see how Fora is used and improve it. We don't use advertising cookies or sell data to advertisers. Stripe sets its own cookies on the payment form to prevent fraud.

5.How long we keep it

We keep your information while your account is open. Chats with a creator's assistant are kept so you and the creator can come back to them; chats from people who never signed in are kept for up to 90 days of no activity. When you ask us to delete your account, we delete your profile, page content and chats. We keep records of payments for as long as tax and accounting laws require, usually up to seven years.

6.Your choices and rights

• Download your data at any time in Settings → Account.
• Change your name and page details yourself, in Settings and on your page.
• Ask us to delete your account from Settings → Account, or by writing to us.
• Depending on where you live, you may have more rights, such as to object to some uses or to complain to a data protection authority. Write to us and we'll help.

7.Security

Your data is stored with providers who protect it with encryption and access controls. Inside Fora, each person can only read their own account, and creators only what belongs to their page. Private files and lesson videos are shared through short-lived links. No system is perfectly secure; if something goes wrong, we will tell the people affected as the law requires.

8.Children

Fora is not for children under 13, and we don't knowingly collect their information. If you think a child has an account, write to us and we'll remove it.

9.Where your data is

Fora is run from the United States and our data is stored in the United States (US East). If you use Fora from elsewhere, your information is processed there.

10.Changes and contact

If we change this policy in a way that matters, we will tell you by email or on Fora before it takes effect. Questions or requests about your data: contact@fora.so.