Privacy Policy

Information We Collect

We only collect the data we need to run a secure writing workspace. This information is limited to:

• Account Credentials: Email addresses and securely hashed passwords required to provision your cloud account. If you sign in with Google, we receive the email and name that provider shares for sign-in.
• Billing Metadata: Subscription status and Stripe customer identifiers needed to run paid plans. Stripe processes your card. We never see or store full card numbers.
• Connected OpenAI keys: If you save an OpenAI API key on Craft or Professional, we store an encrypted copy and the last four characters so we can call OpenAI on your behalf. We never display the full key again. We delete it when you remove the key or delete your account.
• User Content: The text, character files, timelines, and world bibles you create inside the manuscript studio.

How AI Features Use Your Writing

When you use a hosted feature, such as a continuity review, scene layout, or structural brainstorm, the relevant parts of your notes are sent for processing.

Our commitments:

• Zero Training Data: Your private text, notes, and manuscript lines are never used by us to train foundational AI models or public datasets.
• On-Demand Processing: Context processing occurs in real time, only when you take an action in the interface.
• Private Sandboxes: Generated prose suggestions go into your private scratchpad. Nothing joins your official story data until you review, edit, and approve it.

Data Sharing & Third Parties

We do not sell, lease, or monetize your creative writing data, metadata, or contact information to advertising firms or data brokers.

We share data only with services required to run Aetia: Amazon Web Services for hosting; Stripe for paid subscriptions; and OpenAI when you use hosted scene layouts or continuity checks billed through Aetia. If you connect your own OpenAI key on Craft or after a Professional hosted cap, those calls go to your OpenAI account. If you allow analytics cookies and product analytics is enabled, PostHog in the European Union receives consented usage events and a random analytics id. We do not send your manuscripts, prompts, email, or payment details to PostHog. That is an international transfer from New Zealand. We do not use your writing for advertising.

Aetia is operated from New Zealand as a sole trader, trading as Aetia. It is not a registered company. That operator is the privacy contact for this policy.

Security & Data Retention

Data transmitted between your browser and our servers is protected with standard TLS encryption. Connected OpenAI keys are stored encrypted at rest. We do not keep plaintext keys.

Your manuscript files and account profile stay until you delete your account in settings. After a deletion request, we remove your files from active operational systems within thirty (30) days. Optional analytics events, once sent, may be kept by PostHog for up to one year. Turning analytics off stops future collection in that browser. It does not instantly erase events already received. Email privacy@aetia.app to ask about export or deletion of analytics linked to your account. Events from before you signed in may not be linkable to your account.

Your Privacy Rights

Wherever you live, you have the right to:

• Access a download of your narrative manuscript and lore files.
• Correct or update inaccurate account information.
• Request deletion of your account and associated files from our systems.

To exercise these rights, or if you have questions about your creative data, email privacy@aetia.app.