Privacy Policy

Effective date: July 19, 2026

Before launch: replace the bracketed business identity and mailing-address fields and have this policy reviewed for every jurisdiction where you operate.

1. Who operates PlotSpindle

PlotSpindle is operated by [LEGAL BUSINESS NAME] (“PlotSpindle,” “we,” “us,” or “our”). Contact us at support@plotspindle.com or [BUSINESS MAILING ADDRESS].

2. Information we collect

We collect account and contact information, authentication records, subscription and payment identifiers, support messages, usage and diagnostic information, and the story projects you choose to store. Stripe processes payment-card details; PlotSpindle does not store complete card numbers.

3. Manuscripts and project data

Your story data is private to your account. Project files and exports are stored in private object storage and delivered through authenticated routes. The owner console displays operational metadata such as account status, plan, project count, usage, and support history; it does not provide a manuscript-reading endpoint.

4. AI processing

When you request AI generation, PlotSpindle sends the prompt and the story context you selected to the AI provider currently configured for the service to produce the requested result. Provider processing is governed by our provider agreements and their applicable privacy terms. Do not submit information you are not authorized to process.

5. How we use information

We use information to operate and secure the service, provide AI and formatting functions, process subscriptions, deliver transactional messages, prevent abuse, assist customers, comply with law, and improve reliability. We do not sell personal information.

6. Service providers

Key processors may include Cloudflare for application hosting, storage, security, and queues; Stripe for billing; an authorized email-delivery provider; and the AI provider selected for a generation request. We may add or replace providers while maintaining appropriate contractual and security safeguards.

7. Retention

We retain account and project data while your account is active and as needed for the purposes above. Account deletion removes project objects and account records through a controlled deletion workflow, subject to legally required retention, fraud prevention, backup rotation, and unresolved payment or dispute records.

8. Security

Controls include encrypted transport, private storage, secure cookies, CSRF protection, rate limits, anti-bot verification, signed billing webhooks, administrator MFA through Cloudflare Access, and audited owner actions. No security program eliminates all risk.

9. Your choices and rights

You can update your profile, export account data, manage subscriptions, and request deletion from Account Settings. Depending on location, you may have additional rights to access, correct, delete, restrict, or object to processing. Contact support@plotspindle.com.

10. Children

PlotSpindle is not directed to children under 13 and must not be used by anyone who cannot legally enter the Terms without a parent or guardian.

11. International use

Information may be processed in the United States and other countries where our providers operate. We use appropriate transfer mechanisms when required.

12. Changes

We may update this policy. Material changes will be posted in the service and, when appropriate, communicated by email.