Privacy Policy

1. Information we collect

What you give us

• Story inputs. The genre you choose, the main character, and the twist you enter.
• Support messages. Anything you send to [email protected], including your project or payment details if you contact us.

What we generate and store

• Your outline. The title, logline, character bible, season arc, and episode beat sheets generated for your project, including the full 10 episodes if you unlock them.
• Project records. A project ID, the access token hash, return and delivery token hashes, status, timestamps, and the prompt version and model used. The access token itself is kept in your browser, not in plain text on our servers.
• Generation records. Token counts, latency, model name, success or error status, and the model’s raw output for troubleshooting and cost analysis.

Payment information

Checkout is hosted by Dodo Payments, our merchant of record. Dodo collects the information needed to process your payment, calculate tax, and issue your receipt. We receive your email address, payment status, amount, currency, and payment ID. We never receive or store your full card number.

Technical information

• A salted SHA-256 hash of your IP address, used for rate limits and abuse prevention. We do not store the raw IP address in our database.
• A random visitor ID stored in your browser’s localStorage, used as a secondary rate limit signal.
• Basic request metadata and error logs processed by Cloudflare and our API, such as timestamps, status codes, and latency.
• If Cloudflare Turnstile is enabled, Cloudflare processes device and interaction signals to distinguish humans from bots.

Analytics

If we enable Google Analytics 4, it collects page views and interaction events and may set analytics cookies. We use it to understand traffic and improve the product. We do not use it to identify you personally.

What we do not collect

We do not create accounts, and we do not ask for passwords. We do not store your raw IP address in our application database. We do not sell personal information.

2. How we use information

• Generate your outline and deliver the free and full versions.
• Maintain your project state and let you recover it with a link.
• Process payments, unlock the full script, and send the delivery email.
• Prevent abuse, enforce free limits, and keep the Service available.
• Diagnose generation failures and improve prompts, reliability, and cost.
• Respond to support requests and comply with legal obligations.
• Measure aggregate traffic and conversion if analytics is enabled.

We do not use your inputs to train our own models. Our AI provider processes your inputs to generate your outline under its API terms. Our current provider is DeepSeek.

3. Legal bases

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases:

• Contract. To generate your outline, deliver your purchase, and provide support.
• Legitimate interests. To prevent abuse, secure the Service, and improve reliability and quality.
• Consent. For analytics cookies where consent is required. You can withdraw consent at any time.
• Legal obligation. To keep records required by tax and accounting law.

4. Who we share information with

We share only what is needed for each provider to perform its service. We do not sell personal information.

• Cloudflare. Hosting, CDN, D1 database, KV rate limiting, and Turnstile. Cloudflare processes requests and security signals on its global network.
• Dodo Payments. Checkout, payment processing, tax calculation, fraud prevention, and receipts. Dodo is the merchant of record for your purchase and handles payment data under its own privacy policy.
• DeepSeek. AI text generation. Your story inputs and the story bible are sent to DeepSeek to produce the outline. DeepSeek may process data outside your country, including in China.
• Resend. Delivery of the email that contains your recovery link.
• Google Analytics 4. Aggregate traffic and conversion measurement, if enabled.
• Legal and safety. We may disclose information if required by law, to protect rights or safety, or to investigate abuse.

5. International transfers

Our providers operate globally. Your information may be transferred to and processed in countries other than your own, including the United States and China. Those countries may have different data protection laws. Where required, we take steps to put appropriate safeguards in place for these transfers.

6. How long we keep information

We keep project content, generation records, and technical logs for as long as needed to operate the Service, troubleshoot failures, prevent abuse, and understand cost and quality. We delete or anonymize data when it is no longer needed.

• Dodo keeps payment and tax records for as long as required by law. Those records are controlled by Dodo as merchant of record.
• Support emails are kept as long as needed to resolve your request.
• Analytics data is retained according to the retention settings in Google Analytics, if enabled.

You can ask us to delete your project data sooner. We may keep records that we are legally required to keep, or that we need to resolve a dispute or enforce our agreements.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or object to the processing of your personal information, to receive a portable copy, and to withdraw consent. You may also have the right not to be discriminated against for exercising these rights.

To make a request, email [email protected]. Please include your project ID or payment ID if you have it. We may ask for information to verify the request, and we will respond within the time required by applicable law, normally within 30 days. You also have the right to complain to your local data protection authority.

8. Cookies and local storage

• Essential local storage. We store your project access token and a random visitor ID in your browser so you can return to your outline and so we can apply rate limits. Clearing site data removes them.
• Turnstile. If enabled, Cloudflare Turnstile may set cookies or process device signals to verify that you are human.
• Analytics. If Google Analytics is enabled, it may set cookies such as _ga to measure traffic. You can block cookies in your browser or use Google’s opt-out tools.
• Dodo checkout. Checkout runs on Dodo’s domain and uses Dodo’s own cookies under its privacy policy.

We do not serve third-party advertising cookies.

9. Security

We use HTTPS, store access and recovery tokens as hashes, and store only a salted hash of your IP address. Payment card data is handled by Dodo and never reaches our servers. No system is completely secure, so please keep your project link and access token private; anyone with the link can open that project.

10. Children

The Service is not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has used the Service, contact us and we will delete the data.

11. Changes to this policy

We may update this policy as the Service changes. The date at the top shows the latest version. If a change is material, we will post a notice on this page or contact you by email where appropriate. Continued use of the Service after an update means you accept the updated policy.

12. Contact

Questions, requests, or complaints: [email protected].