This Privacy Policy describes what personal information skrivant collects, how we use it, and your choices. skrivant is operated by Nondeterministic Technologies LLC, a Texas limited liability company based in Denton County, Texas. References to “we,” “us,” and “our” mean Nondeterministic Technologies LLC. Contact: legal@skrivant.com.

This policy applies to skrivant.com and scrivant.com (which redirects to skrivant.com).

1. Who can use skrivant

skrivant is for adults 18 and older. We don't knowingly collect personal information from anyone under 18. If you believe we've received information from someone under 18, email legal@skrivant.com and we'll delete it.

2. What we collect

Information you give us:

Account information: Your email address, your password (if applicable), and any account preferences you set. Billing information for book payments is processed by our third-party payment provider (Stripe). We do not store full card numbers on our servers.
Content you create through the Service: Your prompts, the content you write, generate, upload, or otherwise create (including world-building material, character descriptions, outlines, chapters, notes), and any content generated by the AI on your behalf.
Communications: When you email us, the contents of your email and your email address.

Information collected automatically:

Usage data: Pages visited, features used, pipeline steps completed, book purchases and payment events, timestamps, errors encountered.
Device and connection data: IP address, browser type, operating system, referring URL, approximate location inferred from IP.
Advertising click data: If you arrive from one of our ads, the campaign parameters and click identifier in the link you arrived on (for example a Google Click ID). We keep this with the book you start so we can tell which ads lead to purchases.

We do not collect:

Precise geolocation
Contact lists
Data from other services not connected to skrivant

3. How we use your information

We use your information to:

Provide the Service. Generate content, store your work, manage your account and book purchases, authenticate you.
Communicate with you about the Service. Account notices, product changes, responses to your questions, feedback requests about features you've used or asked about, and policy changes. These are service-related communications, not marketing. If we ever want to send marketing emails, we'll ask you to opt in separately.
Improve skrivant. Understand how the Service is used, identify bugs, and decide what to build next. This uses aggregated usage data, not the content of your work.
Protect the Service and its users. Detect abuse, prevent fraudulent or abusive use, enforce the Terms, respond to security incidents.
Comply with law. Respond to valid legal requests and meet legal obligations.

We do not sell your personal information. We do not share your personal information with third parties for their marketing or advertising purposes. We do not use your content to train our own models. Our AI generation provider, DeepSeek, may use the content sent to it for generation to operate and improve its own services and models under its terms (see Section 4).

One exception, for ad measurement: if you reach skrivant from one of our ads and later buy a draft, we report to the ad platform (Google Ads) that the click led to a purchase. That report contains the click identifier, the time of purchase, and the amount. It does not contain your name, email address, or any of your content.

4. Third parties that process your data

We use the following third parties to operate skrivant. Most act as service providers on our behalf. Note the exception described below for DeepSeek, our AI generation provider, whose own terms reserve broader rights over the content sent to it.

DeepSeek (deepseek.com). Processes your prompts and inputs to generate your drafts. DeepSeek is operated by Hangzhou DeepSeek Artificial Intelligence Co., Ltd., and under its published policies it collects, processes, and stores data in the People's Republic of China. DeepSeek's terms reserve the right to use the inputs and outputs sent to it to operate and improve its services and models. Your content is subject to DeepSeek's privacy policy while being processed by their systems. See Section 8 for where your content is processed.
OpenAI (openai.com). Screens text you submit for a narrow category of strictly prohibited content before it is used to generate your book. The text being checked is sent to OpenAI's moderation API for this purpose. Under OpenAI's API data-usage policies, inputs sent to the API are not used to train its models. Your content is subject to OpenAI's privacy policy while being processed by their systems.
Supabase (supabase.com). Hosts our database and authentication infrastructure. Your account information and content are stored on Supabase's infrastructure under their security and privacy terms.
Cloudflare (cloudflare.com). Provides DNS, CDN, DDoS protection, and web analytics for skrivant. Cloudflare sees requests to the Service, including IP addresses and basic request metadata. We use Cloudflare's privacy-respecting Web Analytics, which does not use cookies or fingerprint visitors.
Google Ads (policies.google.com/privacy). Ad conversion measurement, two ways. First, the Google Ads tag runs on skrivant.com so Google can tell when a visit that started from one of our ads reached the site; it sets Google's advertising cookies for that purpose (Section 9). We run it with ad personalization turned off: it is not used to build audiences or to show you ads elsewhere. Second, when a purchase follows a click on one of our Google ads, we send Google the click identifier, purchase time, and amount so Google can attribute the sale to the ad. Google receives no name, email, or content from us through either channel.
Email provider. We send service emails (account verification, policy notices, responses to your questions) via an email service provider. They see your email address and the contents of emails we send to you and that you send to us.

If we change providers in the future, or add new ones, we will update this policy and notify users of material changes before the change takes effect.

5. How long we keep your information

Account information and content: Kept while your account is active. Deleted within 30 days of your account deletion request, except where we need to retain data to comply with law, resolve disputes, or enforce our Terms.
Usage and analytics data: Kept for up to 24 months, then aggregated or deleted.
Email communications: Kept as long as needed to respond to you and maintain a record of the conversation, typically up to 3 years.
Backups: Deleted content may persist in backups for up to 30 days before being overwritten.

6. Your choices and rights

You can:

Access your data. Email legal@skrivant.com and we'll send you a copy of the personal information associated with your account.
Correct your data. Update your email or account details, or email us to request a correction.
Delete your account. Delete it yourself from the account page, which removes your account and content immediately, or email legal@skrivant.com and we'll do it within 30 days. Either way the deletion is final: we do not restore deleted accounts or content. Copies may remain in backups for up to 30 days and are never used to bring an account back, subject to the retention exceptions in Section 5.
Export your work. Email us to request an export of your content in a usable format.
Opt out of non-essential communications. Service emails (like policy changes or account notices) are required while you have an account. If we later add marketing emails, you'll be able to opt out at any time.

Depending on where you live, you may have additional rights. If you are in California, Texas, the European Economic Area, the United Kingdom, or another jurisdiction with specific privacy laws, you may have rights to access, correct, delete, port, or restrict processing of your personal information, and to object to certain uses. To exercise any of these rights, email legal@skrivant.com. We will respond within the time required by the applicable law.

We don't sell personal information, and we don't engage in “targeted advertising” or “profiling” as those terms are defined in state privacy laws. Reporting to an ad platform that one of its clicks led to a purchase (Section 3) is measurement of our own ads, not targeting you with advertising.

7. Security

We use reasonable technical and organizational measures to protect your information, including encryption in transit (HTTPS) and access controls on our infrastructure. No system is perfectly secure, and we can't guarantee the security of your information. If we become aware of a data breach affecting your personal information, we will notify you and take steps required by law.

8. International users and where your content is processed

skrivant is operated from the United States, and most of your information is stored and processed in the United States and other countries where our infrastructure providers operate. However, the text you submit for AI generation is sent to DeepSeek, our generation provider, which under its published policies collects, processes, and stores data in the People's Republic of China. This means the content you send for generation is transferred outside the United States to a provider governed by the laws of the People's Republic of China. Please do not submit confidential information, or personal information about others, that you would not want processed abroad. By using the Service, you consent to these transfers.

If you are in the European Economic Area or the United Kingdom, note that neither the United States nor the People's Republic of China has a general data protection law equivalent to the GDPR. You can exercise your rights by contacting legal@skrivant.com.

9. Cookies and tracking

skrivant uses a small number of cookies:

Authentication cookies to keep you signed in.
Security cookies (via Cloudflare) to protect the Service from abuse.
Ad measurement cookies (Google Ads, for example _gcl_aw). Set when you arrive from one of our ads, and used only so Google can attribute a visit or purchase to that ad. Ad personalization is switched off in our tag, so these cookies are not used to build a profile of you or to target you with advertising elsewhere.

We do not use cookies for cross-site behavioral advertising or for building advertising profiles. Cloudflare Web Analytics does not rely on browser cookies. You can block the Google Ads cookies with your browser's settings or an ad blocker without affecting the Service, and Google describes its own controls at adssettings.google.com.

You can control cookies through your browser settings. If you disable authentication cookies, you won't be able to sign in.

10. Children's privacy

skrivant is not for anyone under 18, and we don't knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, email legal@skrivant.com and we'll delete it.

11. Changes to this Privacy Policy

We may update this policy as the Service evolves. If we make material changes, such as changing AI providers, changing what we collect, or changing how we use your information, we will notify you by email and update the “Last updated” date at the top. Continued use of the Service after changes take effect means you accept the updated policy.

12. Contact

Questions, data requests, or privacy concerns: legal@skrivant.com