Data Sovereignty
Privacy Policy
We believe your creative thoughts belong exclusively to you. This policy details exactly how we collect, process, and protect your story data with complete transparency.
Information We Collect
We collect data strictly to provide a secure, seamless writing workspace. This information is limited to:
- Account Credentials: Email addresses and securely hashed passwords required to provision your cloud account. If you sign in with Google, we receive the email and name that provider shares for sign-in.
- Billing Metadata: Subscription status and Stripe customer identifiers needed to run paid plans. Stripe processes your card. We never see or store full card numbers.
- Connected OpenAI keys: If you save an OpenAI API key on Craft or Professional, we store an encrypted copy and the last four characters so we can call OpenAI on your behalf. We never display the full key again. We delete it when you remove the key or delete your account.
- User Content: The text, character files, timelines, and world bibles you create inside the manuscript studio.
Intelligent Narrative Processing & AI Infrastructure
When you explicitly trigger hosted features—such as a continuity review, scene layout, or structural brainstorm—the relevant snippets of your notes are sent for processing.
We hold a strict architectural commitment to your data sovereignty:
- Zero Training Data: Your private text, notes, and manuscript lines are never used by us to train foundational AI models or public datasets.
- On-Demand Processing: Context processing occurs in real time, only when you take an action in the interface.
- Private Sandboxes: Generated prose suggestions go into your private scratchpad. Nothing joins your official story data until you review, edit, and approve it.
Our AI Integrity Commitment
We do not believe in click-button automated writing. Our intelligent features function solely as a secure sounding board to help you map your ideas. Your manuscripts remain completely private, hidden from public artificial intelligence training cycles.
Data Sharing & Third Parties
We do not sell, lease, or monetize your creative writing data, metadata, or contact information to advertising firms or data brokers.
We share data only with services required to run Aetia: Amazon Web Services for hosting; Stripe for paid subscriptions; and OpenAI when you use hosted scene layouts or continuity checks billed through Aetia. If you connect your own OpenAI key on Craft or after a Professional hosted cap, those calls go to your OpenAI account. We do not use your writing for advertising.
Aetia is operated from New Zealand as a sole trader, trading as Aetia. It is not a registered company. That operator is the privacy contact for this policy.
Security & Data Retention
Data transmitted between your browser and our servers is protected with standard TLS encryption. Connected OpenAI keys are stored encrypted at rest. We do not keep plaintext keys.
Your manuscript files and account profile stay until you delete your account in settings. After a deletion request, we remove your files from active operational systems within thirty (30) days.
Your Global Privacy Rights
Regardless of your country of origin, we honor standard global privacy protections. At any time, you hold the right to:
- Access a download of your narrative manuscript and lore files.
- Correct or update inaccurate account information.
- Request deletion of your account and associated files from our systems.
To exercise these rights, or if you have questions about your creative data, email privacy@aetia.app.