Privacy Policy

ProseCreator LTD (“ProseCreator,” “we,” “us,” or “our”) operates the ProseCreator platform at prosecreator.com, an AI-powered creative writing platform. This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use our platform, website, and related services (collectively, the “Service”).

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this policy, please do not access or use the Service.

This policy complies with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws.

2.1 Information You Provide

• Account Information: Name, email address, and password when you create an account.
• Profile Information: Writing preferences, genre interests, and writing goals.
• Content: Stories, chapters, characters, world-building elements, and other creative content you create using the Service.
• Payment Information: Billing details processed securely through our payment processor (Stripe). We do not store full credit card numbers.
• Communications: Messages you send to us, feedback, and support requests.

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, writing session duration, and interaction patterns.
• Device Information: Browser type, operating system, device identifiers, and screen resolution.
• Log Data: IP address, access times, referring URLs, and error logs.
• Cookies: See Section 8 (Cookies and Tracking) for details.

2.3 AI-Generated Data

• Writing Analysis: Style metrics, continuity scores, and AI detection scores generated by our analysis tools.
• Blueprint Data: Story blueprints, character bibles, and plot thread analyses created by our AI agents.
• Memory Graph: Contextual relationships between your story elements stored in our knowledge graph for continuity.

• Provide the Service: Power AI writing assistance, generate blueprints, maintain story continuity, and deliver content generation features.
• Improve the Platform: Analyze usage patterns to enhance features, fix bugs, and optimize performance.
• Personalize Experience: Adapt writing suggestions, genre-specific tools, and UI preferences to your workflow.
• Process Payments: Handle subscription billing, upgrades, and refunds.
• Communicate: Send service updates, security alerts, and (with your consent) marketing communications.
• Ensure Security: Detect fraud, prevent abuse, and protect the integrity of the platform.
• Legal Compliance: Meet legal obligations, respond to lawful requests, and enforce our Terms of Service.

Important: We do NOT use your creative content to train AI models. Your stories, characters, and world-building remain yours. AI processing occurs in real-time to serve your requests and is not retained for model training purposes.

We implement industry-standard security measures to protect your data:

• Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256).
• Access Controls: Role-based access with multi-factor authentication for staff.
• Infrastructure: Hosted on secure, SOC 2 compliant infrastructure with automated backups.
• Tenant Isolation: Each user’s data is logically isolated in our multi-tenant architecture.
• Regular Audits: We conduct periodic security assessments and vulnerability testing.

While we strive to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security but will notify affected users promptly in the event of a data breach.

We do not sell your personal information. We may share data with:

• Service Providers: Third-party services that help us operate the platform (hosting, payment processing, analytics) under strict data processing agreements.
• AI Providers: Content generation requests are processed by AI providers (e.g., Anthropic, OpenAI) under their enterprise data processing terms. Your content is not used for model training.
• Legal Requirements: When required by law, court order, or to protect our rights and safety.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with advance notice.

Depending on your jurisdiction, you have the following rights regarding your personal data:

6.1 GDPR Rights (EU/EEA/UK)

• Right of Access: Request a copy of your personal data.
• Right to Rectification: Correct inaccurate or incomplete data.
• Right to Erasure: Request deletion of your data (“right to be forgotten”).
• Right to Restrict Processing: Limit how we use your data.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

6.2 Exercising Your Rights

To exercise any of these rights, contact us at privacy@prosecreator.com. We will respond within 30 days (or as required by applicable law). We may need to verify your identity before processing your request.

Your data may be transferred to and processed in countries outside your jurisdiction. We ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission.
• Data processing agreements with all third-party processors.
• Compliance with the EU-US Data Privacy Framework where applicable.

We use cookies and similar technologies to enhance your experience:

8.1 Cookie Categories

• Strictly Necessary: Essential for the platform to function (session management, authentication, CSRF protection). These cannot be disabled.
• Analytics: Help us understand usage patterns (Google Analytics). Loaded only with your consent.
• Functional: Remember your preferences (theme, language, editor settings).
• Marketing: Track campaign effectiveness and deliver relevant content.

8.2 Managing Cookies

You can manage your cookie preferences at any time using the cookie settings banner that appears on your first visit, or by clicking “Cookie Settings” in the footer. You can also configure your browser to block or delete cookies, though this may affect platform functionality.

8.3 Do Not Track

We honor Do Not Track browser signals. When detected, we disable non-essential tracking.

The Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we discover that we have collected data from a child under 16, we will delete it promptly. If you believe a child has provided us with personal information, please contact us at privacy@prosecreator.com.

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy on this page with a new “Last Updated” date.
• Sending an email notification for significant changes.
• Displaying a prominent notice on the platform.

Your continued use of the Service after changes are posted constitutes acceptance of the revised policy. If you disagree with changes, you may close your account.

For privacy-related inquiries, requests, or complaints:

If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.

If you are a California resident, you have additional rights under the CCPA:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected.
• Right to Delete: Request deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out: We do not sell personal information, so no opt-out is necessary.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise your CCPA rights, contact us at privacy@prosecreator.com.

If you access the Service from outside the European Economic Area, your information may be transferred to, stored, and processed in the EEA or other jurisdictions. By using the Service, you consent to such transfer, subject to the safeguards described in Section 7.

For users in specific jurisdictions:

• Brazil (LGPD): You have rights similar to GDPR, including access, correction, deletion, and data portability.
• Canada (PIPEDA): You may request access to your personal information and challenge its accuracy.
• Australia (Privacy Act): You have the right to access and correct your personal information.