01Who We Are
PaceForge is operated by Ivan G., an independent freelance professional based in Lovech, Bulgaria. Ivan G. is the data controller responsible for your personal data collected through this website and app.
02What Data We Collect
To create an account and generate your training plan, we collect and store the following:
- Account details — your email address and name
- Strava activity data — via Strava's OAuth connection: your recent runs, pace, distance, heart rate, and athlete profile, used to calculate your fitness baseline
- Race goal details — target race, distance, goal time, and race date
- Training preferences — preferred training days, experience level, and any injury history you choose to share
- Payment data — handled entirely by Stripe. We never see or store your card number; we only receive confirmation of payment, the plan/tier purchased, and subscription status
- Generated plan data — the training plan itself, plus any notes added by your coach during review
03Why We Collect It
We collect this data for the following purposes:
- To generate a training plan calibrated to your actual fitness and goal race
- To let your coach review and personally refine your plan
- To process payment and manage your Unlock purchase or Coach+ subscription
- To send account, plan, and billing-related communications
- To send product updates and relevant marketing communications, where you have consented
The legal basis for processing account, plan, and payment data is performance of a contract with you (Article 6(1)(b) GDPR). Marketing communications are sent only with your consent (Article 6(1)(a) GDPR), which you can withdraw at any time.
04Promotion Codes
Discount and promotion codes applied at checkout are validated and redeemed through Stripe. We record whether a code was used on your order but do not separately track discount eligibility outside of Stripe's checkout system.
05Who We Share Data With
- Strava — the source of your activity data, connected via OAuth with your explicit authorisation. You can disconnect at any time from your account settings or directly in Strava
- Stripe — our payment processor, handling all checkout, subscription billing, and card data. Stripe is based in the US and processes data under Standard Contractual Clauses
- Supabase — your account and plan data is stored in a Supabase PostgreSQL database hosted on AWS EU infrastructure
- Microsoft Azure — our backend API runs on Azure Functions in the EU region
- Resend — our email provider, used to send account, billing, and marketing emails
- Your coach — Ivan G. personally reviews your plan, PRs, race goal, and any injury history you provide in order to give you accurate, individual coaching notes
We do not sell, rent, or trade your personal data with any third party for their own marketing purposes.
06Data Retention
We keep your account, plan, and Strava-derived data for as long as your account is active. If you delete your account, we erase your personal data within 30 days, except where we are required to retain billing records for tax and accounting purposes (typically 5 years under Bulgarian law).
07Your Rights Under GDPR
- Access — request a copy of the data we hold about you
- Rectification — ask us to correct inaccurate data
- Erasure — ask us to delete your account and data at any time
- Restriction — ask us to stop processing your data without deleting it
- Portability — request your data in a machine-readable format
- Withdraw consent — withdraw consent to marketing at any time
- Object — object to processing based on legitimate interests
To exercise any of these rights, email ivan@pace-forge.com. We will respond within 30 days. You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection at cpdp.bg.
08Cookies
PaceForge does not use analytics, advertising pixels, or third-party tracking scripts. When you check out for Unlock or Coach+, Stripe's hosted checkout page may set its own cookies to process payment securely — this happens on Stripe's domain and is outside our direct control. See Stripe's own privacy policy for details.
09Minimum Age
PaceForge is intended for users aged 16 and over. By creating an account, you confirm that you are at least 16 years old. We do not knowingly collect data from anyone under 16. If you believe a person under 16 has submitted their data, please contact us and we will delete it promptly.
10Changes to This Policy
We may update this Privacy Policy as the product develops. We will notify account holders by email of any material changes before they take effect.