Privacy Policy
This policy explains what personal data CForge handles, why, how long it keeps it and how you can exercise your rights. It applies to this site and to the CForge application.
1. Who is responsible for your data
The data controller is FLOW SOLUTIONS S.A.S., a Colombian company (tax ID, NIT, 902073017) domiciled in Medellín, Colombia. CForge is one of its products.
- Address: Carrera 123 B # 61 - 28, Medellín, Colombia
- E-mail: cforge2026@gmail.com
- Phone: +57 314 826 6581
Questions and claims about personal data are handled by the CForge team, at that e-mail address.
2. What CForge is
CForge finds the best moments in the live streams of creators who allow it, edits them into vertical clips and publishes them on the YouTube channel of whoever authorizes it and on CForge's accounts on TikTok, Instagram and Facebook. With those of several creators it also makes long videos, episodes that CForge's mascot presents and that it publishes on that YouTube channel. Today it is a private tool: FLOW SOLUTIONS S.A.S. operates it, and it does not take new accounts.
3. What data we handle, and why
If you connect a YouTube channel
CForge uses YouTube API Services. When you connect a channel, Google shows you the permissions CForge asks for and you decide whether to grant them. There are two: uploading videos to your channel and viewing your channel. It may ask for a third one, which is optional: viewing the YouTube Analytics reports of your content.
With those permissions CForge accesses and stores this data:
- your channel's identifier and name, to show you which channel you connected;
- the credential Google issues to upload videos on your behalf, which is stored encrypted, and the permissions you granted;
- the date you accepted these terms and this policy when you connected it, and with which CForge account, as proof of your authorization;
- the category of your uploads and whether they are made for kids, which you declare;
- for each video you upload with CForge, the title and description you wrote, the privacy you chose, the time, and the identifier and privacy status YouTube gave it;
- for each video you upload with CForge, its views, likes and comments and, if you granted the YouTube Analytics permission, its shares, the subscribers it gained, the percentage of it that was watched and how long a view lasts on average. CForge reads them one hour, 6 hours and 1, 2, 7 and 28 days after publication, and keeps them only if the video is public at that moment;
- for each long video you upload with CForge, if you granted the YouTube Analytics permission, also the minutes it was watched, what share of its audience was still watching at each point of the video, also against videos of a similar length, and where its views came from, with the minutes of each source. CForge reads them with its figures at 7 and 28 days;
- for your channel, once a day, its subscribers, rounded as YouTube shows them, and, if you granted the YouTube Analytics permission, the minutes watched over the last year of all its long videos and live streams.
CForge uses this data to upload the videos you schedule and to show you where each one stands. To keep it current it reads again from YouTube your channel's name and, for the videos it uploaded with CForge, whether they are still there and with which privacy status. With those videos' figures it measures how each one does against what is usual for your channel, to decide what to publish and when, and where in a long video its audience leaves, to make the next ones better. With your channel's subscribers and minutes it shows you how far it is from YouTube's Partner Program. Apart from those minutes of the whole channel, it does not read your other videos, your comments or who your subscribers are, and it cannot edit or delete what you have already published.
To write the Shorts' scripts, the artificial intelligence models of Anthropic (Claude) and Google (Gemini) may receive a summary of what performed on the channels connected to CForge, yours included: which traits the Shorts had (their length, their format, whether they carry commentary, their effects) and how they performed 48 hours after going up against what is usual for their channel, with how many Shorts had each. They do not receive your videos, the figures of any single video, or your channel's name.
If you connect a Facebook Page or an Instagram account
CForge publishes Reels on Facebook and Instagram with Meta's APIs. To connect them you log in with your Facebook account, and Meta shows you the permissions CForge asks for: viewing your Pages and their content, publishing on them, viewing the Instagram account linked to a Page and publishing on it, and accessing the Meta businesses they belong to. You decide whether to grant them, and for which Page and which account. CForge connects a single Page, one you can publish on, and the Instagram account linked to it if you included it.
With those permissions CForge accesses and stores this data:
- the Page's identifier and name, and the Instagram account's identifier and user name, to show you which ones you connected;
- the Page credential Meta issues, which CForge publishes with and which is stored encrypted, and the permissions you granted. Your Facebook account's credential is used only while you connect, and it is not stored;
- until when Meta lets CForge access that data, to ask you to connect again before then;
- the date you accepted these terms and this policy when you connected them, and with which CForge account, as proof of your authorization;
- for each Reel CForge publishes, the text that goes with it, the title Facebook shows, the time, and the identifier and link Meta gave it.
CForge uses this data to publish the Reels that are scheduled and to show you where each one stands. Every day it asks Meta whether the Page's credential still works and with which permissions, and to confirm that a Reel went out it may read the Instagram account's recent posts. It does not read the Reels' figures, the comments, the messages or who follows the Page or the account, and it does not edit or delete what is already published.
If you connect a TikTok account
CForge publishes on TikTok through Zernio, a service that publishes on social networks through its API. The TikTok account is first connected at Zernio, which shows the permissions it asks for on TikTok and keeps its credential; then it is chosen in CForge. CForge keeps:
- the TikTok account's identifier and user name and the account's identifier at Zernio, without any credential;
- the date you accepted these terms and this policy when you connected it, and with which CForge account, as proof of your authorization;
- for each video CForge publishes, the text that goes with it, whether it allows comments, duets and stitches, whether it carries the label for content made with artificial intelligence, the time, who accepted TikTok's music usage confirmation, when and in which version of its text, and the identifiers and link Zernio and TikTok gave it;
- if you turned on the account's automatic mode, who turned it on, when and in which version of its text: with that, they accepted TikTok's music usage confirmation ahead of time for each video the autopilot publishes, without seeing them one by one.
Before each post, CForge asks TikTok, through Zernio, for the account's name and what it lets it publish, without keeping it. Every day it asks Zernio whether the account still works and can publish. It does not read the videos' figures, the comments, the messages or who follows the account.
If you are a creator who allows clips of your streams
CForge only works with creators who gave their permission. About you it handles:
- your public name, and the address and the identifier of your channels;
- if you authorize CForge to read the chat of your live streams with your Twitch account, its identifier, its user name, the permission you granted and the credential Twitch issues, which is stored encrypted;
- the terms of your permission: where your clips may be published, the credit you ask for, whether you allow CForge's commentary, mascot and brand on your content and the monetization of what is published, from when and until when it is valid, and a link or note that backs it;
- the video of your public live streams while the permission is in force, with each stream's identifier and when its recording started and ended, the clips made from it and, for the subtitles, the transcript of what is said in each approved clip;
- what an artificial intelligence model says about your clips: what happens in each, a mark that orders the review and, for approved clips, the Short's script (its title, its description, the on-screen texts and the comments of CForge's mascot), which a person reviews before anything is published;
- if your moments appear in a long video, its script (which moments go in and in what order, the mascot's lines, which may name you, its title, its description and the words of its covers), the mascot's voice saying those lines and what a model says when it reviews the episode, which a person looks at before it is published;
- the position of faces and of your camera's box in the picture, to frame the clip. CForge detects where a face is, never whose it is, and it keeps no images of faces.
They are used to find the best moments, edit the clips and publish them with your credit where your permission allows: on the YouTube channels connected to CForge and on CForge's accounts on TikTok, Instagram and Facebook. If your permission allows recording, YouTube and CForge's commentary, your moments may also appear, with your credit, in the long videos CForge publishes on those YouTube channels, alongside those of other creators.
To do so, the artificial intelligence models of Anthropic (Claude) and Google (Gemini) receive each clip's video with its sound, or frames of it, and the transcript of what is said. They do not receive the chat's text or the viewers' clips, though some of the chat may be seen or heard in the video if your stream shows it or reads it aloud. For a long video they also receive what was said about each moment, to choose them and write the script; Google's model reviews the whole episode, with its sound, and Google's synthetic voice says the mascot's lines.
From chat and from viewers' clips
During a live stream, CForge counts how many chat messages there are and of which kind, in spans of 10 seconds. It does not keep the text of any message, nor the name or the identifier of whoever wrote it. From the clips that viewers make it keeps their identifier, time, length and views, which moment of the stream they show and how many the same account made in those minutes, to set aside those a program churns out: never who made them or their title.
If you have an account to sign in to CForge
Only people with an account sign in to the CForge application, and whoever administers it creates the accounts: there is no open sign-up. Of your account we keep:
- your e-mail address, which you sign in with;
- your password, only as a digest it cannot be recovered from, never the password itself;
- your role, and whether your password is a temporary one or your account is deactivated;
- when the account was created and when you last signed in;
- if your password is a temporary one, when it was given to you, since it expires after 7 days;
- if you use the second factor, your authenticator app's key, encrypted; the last code you used, so that it cannot be used twice; and your recovery codes, only as digests they cannot be recovered from;
- how many failed attempts it has at the steps that ask for your app's code or your current password, to lock it for 15 minutes at the fifth;
- that it was your account that accepted the terms when a channel or a social network account was connected, and that accepted TikTok's music usage confirmation when a video was scheduled there, or ahead of time, when a TikTok account's automatic mode was turned on.
We use them so that only authorized people sign in, to protect the accounts and to know who accepted the terms. CForge also notes in its technical log which account created, deactivated, reactivated or reset another, without the e-mail or the password.
When someone tries to sign in, their IP address is used for one minute to limit the attempts. To count wrong passwords we do not keep the address as such, but a short digest of it joined to the account. That digest is deleted on its own after 15 minutes; when the password is the right one, it is kept for 30 days, so that an attack on your account does not lock you out from the addresses you use. We also count how many wrong passwords each account receives in an hour. The digest is pseudonymous data: it does not show the address, but with effort it could be linked to it again.
If you visit this site
This site asks you for no data and has no analytics or advertising. The provider that hosts it, Cloudflare, receives the technical data of any visit to a web page, such as your IP address, to deliver and protect it.
If you write to us
We keep your message and your e-mail address to answer you.
4. Cookies and storage on your device
This site stores no cookies or any other information in your browser or on your device.
The CForge application stores a single cookie, named "__Host-cforge.session", when you sign in with your account. It is necessary to keep your session open: without it you would have to sign in again on every page. It lasts at most 14 days without your using CForge, it is renewed as you use it, and it is deleted when you sign out. No program on the page can read it, it does not serve to follow you outside CForge, and there are no analytics, advertising or third-party cookies.
5. Who it is shared with
We do not sell personal data or use it for advertising, and no third party serves content or ads in CForge. Inside FLOW SOLUTIONS S.A.S. only the people who operate CForge see it. It leaves CForge in these cases:
- YouTube. The video, its title and its description, when the channel's owner publishes it. From then on Google handles them under its privacy policy: http://www.google.com/policies/privacy.
- Meta (Facebook and Instagram). Each Reel's video, the text that goes with it, with the creator's credit, and on Facebook its title, when CForge publishes it on its Page or its Instagram account. Meta downloads the video from a link to CForge's storage that expires in half an hour, and on Facebook it checks whether it has copyrighted content: if it finds matches, CForge does not publish it. From then on Meta handles them under its privacy policy: https://www.facebook.com/privacy/policy/.
- Zernio and TikTok. The video, the text that goes with it, with the creator's credit, and its options go to Zernio, which works on our behalf: it keeps it in its storage and publishes it on CForge's TikTok account, under its privacy policy: https://zernio.com/privacy-policy. Once it is on TikTok, TikTok handles it under its own: https://www.tiktok.com/legal/privacy-policy.
- Twitch. CForge asks its API for the public data of each creator's live streams (when they start, their clips and their videos) and reads their chat. Twitch receives only the public identifiers of those channels and the credentials of the accounts that authorized it.
- Kick and TikTok. CForge asks Kick's API whether each creator's channels are live, and receives their chat messages from Kick to count them; on TikTok, it opens the channel's public page to find out. To record a live stream on Kick or TikTok, a CForge browser opens its public page. These platforms receive only the public names and identifiers of those channels.
- Providers that work on our behalf: Cloudflare, which hosts this site, delivers the CForge application, protects its connection and stores the videos of the clips and their vertical versions, and those of the long videos with their covers and the mascot's voice; Railway, which hosts the CForge application and its database; and Anthropic and Google, whose artificial intelligence models analyze the clips, write the scripts with the summary of what performed and review the long videos, and Google also gives the mascot its synthetic voice, as described above. Under their terms they do not use that data to train their models; Google keeps it for 55 days to monitor abuse, and Anthropic deletes it within 30 days, except what its systems flag as possible abuse, which it may keep for up to 2 years.
- Authorities, when a law or a court order requires it.
Google, Meta, TikTok, Zernio, Cloudflare, Railway and Anthropic process data outside Colombia, in the United States and the European Union among other places.
6. How long it is kept
- Your YouTube channel's data, while the channel is connected. CForge reads it again from YouTube before it has been stored for 30 days, to keep it current, and deletes what it could not read again in time. If you disconnect the channel from CForge, it revokes its access at Google immediately and deletes that data right away, within 7 days at most. If you remove the access from your Google Account, CForge deletes it within 30 days at most. What you wrote for each video (its title, its description, the privacy you chose and the time) stays as a record of what was published, without what YouTube gave.
- The figures of each video CForge uploaded, and for a long video also how it was watched, while the channel is connected and the video is still on YouTube: CForge checks at least every 28 days that it is still there and, if it is not, deletes them. It also deletes them when the channel is disconnected, within 7 days at most, or if you remove the access from Google, within 30 days at most. They are kept for 36 months at most.
- Your channel's subscribers and minutes, until CForge reads them again, the next day. If it cannot read them again within 30 days, it deletes them, and it also deletes them when the channel is disconnected, within 7 days at most, or if you remove the access from Google, within 30 days at most.
- The summary of what performed that the models received, from Anthropic and Google, is deleted within their own periods, even if you disconnect the channel earlier: Google keeps it for 55 days, and Anthropic deletes it within 30 days, except what it flags as possible abuse.
- The data of a Facebook Page or an Instagram account, while it is connected. If you disconnect it from CForge, CForge deletes it right away with its credential; if you remove CForge's app or its permissions from Facebook, CForge notices it in its daily check and deletes it within 30 days at most.
- The data of a TikTok account, while it is connected. If you disconnect it from CForge, CForge deletes it right away, and it stays connected at Zernio until you remove it there; if it is disconnected at Zernio or on TikTok, CForge notices it in its daily check and deletes it within 30 days at most.
- What Meta, Zernio and TikTok gave about each published video (its identifiers and its link), while its account is connected, and within 7 days at most after it is disconnected. What was written for each one (the text that goes with it, the title, its options and the time) and who accepted TikTok's confirmation stay as a record of what was published.
- The video of a live stream, about 15 minutes. The stretches that become candidate clips, 90 seconds at most, are copied apart.
- Clips: a candidate's video, while it waits for its review, and it is deleted right away if it is rejected; an approved clip, with its transcript and its vertical versions, for as long as the creator's permission lasts.
- What artificial intelligence said about the clips (each candidate's mark, and each approved clip's reading and script), while the creator's permission lasts.
- Long videos: each episode's script, the mascot's voice, its video and its covers, for as long as its creators' permissions last.
- Chat counts, the data of viewers' clips and audio measurements, 7 days, except for those of the stretches that became candidates, which are kept for as long as the creator's permission lasts.
- The record of a permission, with its terms and what backs it, and the record of what was done with each creator's content, without video or audio: each stream recorded, each candidate with its scores and the decision taken, and the framing of each clip with the camera's box. They are kept after the permission ends, as proof and to learn which moments work.
- The data of your CForge account, while the account exists. A deactivated account can no longer sign in, and its data is kept until you ask for it to be deleted.
- E-mails, for as long as it takes to answer you.
When a creator's permission ends, CForge stops recording their live streams, cancels what was scheduled and deletes within minutes their clips, published or not, with their transcripts, their vertical versions and what artificial intelligence said about them, the video and the covers of the long videos they appear in, and the counts and the measurements of their streams. The video of a stream in progress goes by itself, after 15 minutes. A video already in Zernio's hands may go out on TikTok in the two minutes left before its time. What was already published on YouTube stays on its owner's channel, and only the owner can delete it; what was published on CForge's accounts on TikTok, Instagram and Facebook stays on them: if the creator asks, we delete it.
The database is in force while CForge operates; each piece of data is kept for the periods in this section.
7. How to remove the access to your accounts and delete your data
- In CForge, with "Desconectar" (Disconnect) on the Conexiones (Connections) screen, for a YouTube channel, a Facebook Page, an Instagram account or a TikTok account.
- For YouTube, in your Google Account, from the permissions page: https://security.google.com/settings/security/permissions.
- For Facebook and Instagram, in your Facebook account, by removing CForge's app from its business integrations: https://www.facebook.com/settings?tab=business_tools. CForge keeps no credential with which to withdraw that permission itself.
- For TikTok, at Zernio, by disconnecting the account there.
- You can also ask us by e-mail to delete the data we hold about you. We do it right away, within 7 days at most.
The steps, one by one, are in How to delete your data.
8. Security
Access credentials are stored encrypted, CForge asks only for the permissions it uses, and only the people who operate the tool see the data. Each person signs in to the application with an account of their own, whose password is kept only as a digest it cannot be recovered from, and five failed attempts lock it for 15 minutes. No system is infallible: if an incident affects your data, we will tell you.
9. Your rights
Colombian law (Ley 1581 de 2012) gives you the right to:
- know, update and correct your personal data;
- ask for proof of the authorization you gave;
- know how your data has been used;
- revoke the authorization and ask for your data to be deleted;
- access, free of charge, the data of yours that we handle;
- file a complaint with the Superintendencia de Industria y Comercio, Colombia's data protection authority.
10. How to exercise them
Write to cforge2026@gmail.com. Say who you are, what you ask for and where we should answer, and attach whatever supports your request.
- Queries. We answer within 10 business days of receiving one. If we cannot, we tell you why and by which date, which is no more than 5 further business days.
- Claims, to correct, update or delete data, or to revoke an authorization. If information is missing, we ask you for it within the following 5 days; if two months pass without your sending it, the claim is taken as withdrawn. A claim is resolved within 15 business days counted from the day after we receive it; if we cannot, we tell you why and by which date, which is no more than 8 further business days.
If you are not satisfied after that procedure, you may turn to the Superintendencia de Industria y Comercio.
11. Minors
CForge is not directed to minors. You must be of legal age to connect a channel or to give a permission.
12. Changes to this policy
If this policy changes substantially, we will announce it on this site and tell those who have a connected channel, a permission in force or an account before the change applies. If what we use your data for changes, we will ask you for a new authorization.