Privacy Policy

Last updated: 14 March 2026

1. Who We Are

KrytenForge ("we", "us", "our") operates the website krytenforge.com and provides automated outreach and email services. We are based in the United Kingdom.

2. Information We Collect

We collect the following types of information:

Account information: name, email address, and password when you sign up.
Billing information: payment details processed securely through Stripe. We do not store card numbers.
Email connection credentials: SMTP credentials or OAuth tokens you provide to connect your email account. These are encrypted at rest using AES-256-GCM.
Campaign data: target professions, cities, email templates, and outreach activity you configure within the platform.
Usage data: pages visited, features used, and anonymised analytics via Plausible (cookie-free, GDPR-compliant).

3. How We Use Your Information

To provide and operate the KrytenForge service, including sending emails on your behalf through your connected email account.
To process payments and manage your subscription.
To communicate with you about your account, service updates, or support requests.
To improve the platform based on anonymised usage patterns.

4. Google User Data

If you connect your Google account via OAuth, we request access to send emails on your behalf. Specifically:

We request the gmail.send scope to send outreach emails through your Gmail account.
We store your OAuth refresh token, encrypted at rest, to maintain the connection.
We do not read, scan, or store the contents of your inbox.
We do not share your Google data with any third parties.
You can revoke access at any time from your Google Account permissions or from the KrytenForge dashboard.

Our use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements.

5. Data Security

All sensitive credentials (SMTP passwords, API keys, OAuth tokens) are encrypted using AES-256-GCM before storage. Data is transmitted over HTTPS. Access to production systems is restricted to authorised personnel only.

6. Data Sharing

We do not sell your data. We share information only with:

Stripe: for payment processing.
Your email provider: when sending emails through your connected account (Gmail, Outlook, or your SMTP server).

7. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we remove your personal data and credentials within 30 days. Anonymised analytics data may be retained indefinitely.

8. Your Rights

Under UK GDPR, you have the right to:

Access the personal data we hold about you.
Request correction or deletion of your data.
Export your data in a portable format.
Withdraw consent or object to processing.

To exercise these rights, contact us at support@krytenforge.com.

9. Cookies

We use a single essential cookie for authentication (session token). We do not use tracking cookies. Our analytics provider (Plausible) is cookie-free.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via the email address associated with your account.

11. Contact

For privacy-related enquiries, email support@krytenforge.com.