Privacy Policy
Introduction
NovelFlame ("we," "our," or "the Service") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and disclose your information when you use our AI-powered interactive fiction platform. By using the Service, you consent to the practices described in this policy.
Information We Collect
Account Data
When you create an account, we collect your email address and an encrypted password hash. We may also collect age verification status as required by applicable law.
Usage Data
We automatically collect information about how you interact with the Service, including pages visited, features used, session duration, device type, browser type, operating system, and IP address. This data is collected through server logs and analytics tools.
AI Interaction Data
When you generate stories, we process your story preferences, branching choices, and generation parameters. AI-generated content (text, images, video) is stored in association with your account to provide library functionality and session continuity.
How We Use Information
We use your information to: (a) provide, maintain, and improve the Service; (b) process token purchases and manage your account; (c) send transactional communications such as password resets and purchase confirmations; (d) enforce our Terms of Service and Content Policy; (e) detect and prevent fraud, abuse, and security incidents; (f) comply with legal obligations. We do not use your personal data to train AI models.
Information Sharing
We do not sell, rent, or trade your personal information to third parties. We may share information with: (a) service providers who assist in operating the platform (payment processors, hosting providers, AI model providers) under strict data processing agreements; (b) law enforcement or government agencies when required by law or to protect our rights; (c) a successor entity in the event of a merger, acquisition, or sale of assets.
Data Storage & Security
Your data is stored on servers located in the United States. We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, and access controls. Authentication is handled through Supabase Auth with secure token-based sessions. While we take reasonable precautions, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
Cookies & Tracking
We use essential cookies required for authentication and session management. We may also use analytics and marketing cookies with your consent, managed through our cookie consent banner. You can update your cookie preferences at any time using the "Cookie Settings" link in the site footer. Essential cookies cannot be disabled as they are necessary for the Service to function.
Your Rights
California Residents (CCPA)
If you are a California resident, you have the right to: know what personal information we collect and how it is used; request deletion of your personal information; opt out of the sale of personal information (we do not sell your data); and not be discriminated against for exercising your rights.
EU/UK Residents (GDPR)
If you are located in the EU or UK, you have the right to: access your personal data; request rectification of inaccurate data; request erasure of your data; request data portability; restrict or object to processing; and withdraw consent at any time. To exercise these rights, contact us at the email listed below.
Children's Privacy
The Service is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If we discover that we have collected information from a child under 13, we will promptly delete that data and terminate the associated account.
Data Retention
We retain your account data and generated content for as long as your account is active. Upon account deletion, we will remove your personal data and generated content within 30 days, except where retention is required by law or for legitimate business purposes (such as fraud prevention or financial record-keeping).
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and, for registered users, via email notification at least 14 days before changes take effect. Your continued use of the Service after such changes constitutes acceptance of the updated policy.
Contact
If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at:
- Email: privacy@novelflame.ai