Privacy Policy
Last updated
How AuthorGPT handles your data: what is collected, who else sees it, how long it is kept, and how to have it removed.
1. What we collect
- Account details. Your name, email address and a hashed password, or the name, email address and identifier your Google account provides if you sign in that way. We never see your Google password.
- What you write. The briefs you submit, the outlines you approve, the manuscripts generated for you and any writing samples you upload to match a style.
- Usage. Which features you use, how many books and chapters you generate, and the token cost of each generation, so we can operate and price the service.
- Technical data. IP address, browser and device type, and server logs. IP addresses are also used to rate-limit the free tools.
- Billing. Your subscription status and plan. Card details go directly to Stripe and never reach our servers.
2. Why we can use it
We process account, manuscript and billing data because it is necessary to provide the service you have asked for. We process usage and technical data on the basis of our legitimate interest in keeping the service working, secure and financially viable. Where we rely on consent, such as optional marketing email, you can withdraw it at any time.
3. Who else processes it
We use the following processors. Each receives only what it needs to do its job, and none of them is permitted to use your manuscripts for their own purposes.
| Processor | Purpose | Data |
|---|---|---|
| Vercel | Hosting and content delivery | Requests, IP addresses, logs |
| Neon | Database hosting | Account details, books, chapters |
| OpenAI | Text generation | Your briefs and manuscript text |
| Inngest | Background job orchestration | Job metadata and identifiers |
| Stripe | Payments and subscriptions | Billing details, payment methods |
| Resend | Transactional email | Email address, message content |
| Sign-in, if you choose it | Name, email, account identifier |
Your manuscript text is sent to our model provider to generate your book. We use their API under terms that do not permit your content to be used to train their models. They may retain it briefly for abuse monitoring under their own policy.
We do not sell your data, and we do not share it for advertising.
4. How long we keep it
- Books and chapters: until you delete them or close your account.
- Exported files: 30 days, then removed automatically. You can always export again.
- Account details: until you close your account, then deleted within 30 days.
- Billing records: kept as long as tax and accounting law requires, typically six to seven years, even after an account is closed.
- Server logs: up to 30 days.
5. Cookies
We set a session cookie so you stay signed in, and small preference cookies remembering your theme and whether the sidebar is collapsed. That is all. We use no advertising cookies and no cross-site trackers, which is why you are not asked to dismiss a consent banner.
6. Your rights
You can access and correct your account details in settings, export any book at any time, and delete a book or your whole account yourself. Deleting your account deletes your manuscripts.
Depending on where you live you may also have the right to a copy of your data in a portable format, to object to certain processing, or to complain to a data protection authority. Email support@authorgpt.ai and we will respond within 30 days.
7. Security
Data is encrypted in transit and at rest. Passwords are hashed and never stored in a readable form. Access to production systems is limited to those who need it. No system is perfectly secure, and if a breach affects your data we will tell you and the relevant authority as the law requires.
8. International transfers
Our processors operate in the United States and the European Union, so your data may be transferred outside your own country. Where it leaves the European Economic Area we rely on the European Commission’s Standard Contractual Clauses or an adequacy decision.
9. Children
AuthorGPT is not for anyone under 16. We do not knowingly collect data from children, and will delete any account we learn belongs to one.
10. Changes to this policy
The date at the top reflects the current version of this policy. We will email you before a material change takes effect.
11. Contact
AuthorGPT is the controller of the data described above. Questions about this policy, or a request about your own data: support@authorgpt.ai. We respond within 30 days.
12. Governing law
This policy is governed by the laws of the State of Texas and the laws of the United States of America, consistent with our Terms of Service. Where you live in a jurisdiction whose data protection law grants you rights beyond those described here, those rights still apply.