Privacy Policy

1. Information we collect

The information we collect depends on how you use Spinalith.

Account information

When you create an account, we may collect information such as your name, email address, authentication information, account preferences, and other information necessary to provide and secure your account.

Story and project content

When you use Spinalith, you may create or store story-related content including characters, scenes, chapters, timelines, locations, lore, notes, images, relationships, planning data, and other project information.

This content remains associated with your account so that we can provide the Spinalith service to you.

Contact information

If you use our contact form, we collect the name, email address, subject, and message that you submit. We may also collect limited technical information such as your browser or device user-agent for security, troubleshooting, and abuse prevention.

Billing information

Paid memberships are processed through Stripe. Spinalith does not store your full payment-card number. Stripe may collect and process payment, billing, transaction, device, and fraud- prevention information as necessary to provide payment services.

Technical information

Our hosting, security, authentication, and infrastructure providers may automatically process technical information such as IP addresses, browser type, device information, request metadata, timestamps, and security signals when you use the website or application.

2. How we use information

We use information collected through Spinalith to:

• Provide, operate, and maintain the Spinalith service.
• Create and secure user accounts.
• Store and display your story and project information.
• Process memberships, payments, and billing.
• Respond to questions, support requests, and feedback.
• Prevent spam, fraud, abuse, and unauthorized access.
• Diagnose technical problems and improve reliability.
• Comply with applicable legal obligations.

3. Service providers

We use third-party service providers to operate parts of Spinalith. These providers may process information as necessary to provide their services to us.

• Supabase — database, authentication, storage, and backend infrastructure.
• Stripe — membership billing and payment processing.
• Vercel — website hosting and delivery.
• Cloudflare Turnstile — bot and abuse prevention on public forms.

These providers have their own privacy practices and may process technical or personal information according to their respective policies.

4. Payment information

Payments are handled by Stripe. Payment-card information entered during checkout is provided directly to Stripe rather than stored in the Spinalith application.

Stripe may process information including your name, email, billing information, payment information, transaction details, device information, and fraud-prevention signals.

5. Cookies and local storage

Spinalith and its service providers may use cookies, browser storage, or similar technologies when necessary to provide authentication, maintain sessions, remember settings, protect the service, and operate website or application functionality.

If we introduce advertising, behavioral tracking, or additional analytics technologies that materially change how information is collected or used, this Privacy Policy will be updated.

6. How we share information

We do not sell your personal information or your story content.

We may share information with service providers when necessary to operate Spinalith, process payments, provide infrastructure, prevent abuse, or comply with law.

We may also disclose information when reasonably necessary to protect the rights, safety, security, or property of Spinalith, our users, or others, or when required by valid legal process.

7. Your story content

You retain ownership of the original story content and project material that you create or upload to Spinalith.

We process and store that content only as necessary to provide, maintain, secure, and improve the functionality of the service, subject to these Terms and this Privacy Policy.

8. Data retention

We retain information for as long as reasonably necessary to provide the service, maintain your account, meet legal or financial obligations, resolve disputes, prevent abuse, and enforce our agreements.

Some information may remain temporarily in backups or system logs after deletion as part of normal technical operations.

9. Your choices and requests

Depending on your location, you may have legal rights regarding personal information. Regardless of location, you may contact us to request that we review a reasonable request to access, correct, or delete personal information associated with you.

We may need to verify your identity before completing a request, and we may retain information when required by law or necessary for legitimate security, billing, fraud-prevention, or record- keeping purposes.

10. Security

We use reasonable administrative, technical, and organizational measures intended to protect information against unauthorized access, disclosure, alteration, or destruction.

No online system can guarantee absolute security, and we cannot guarantee that information will never be accessed or disclosed improperly.

11. Children's privacy

Spinalith is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If we learn that such information has been collected, we will take reasonable steps to delete it.

12. Changes to this policy

We may update this Privacy Policy as Spinalith changes. When we make material changes, we will update the date shown at the top of this page and may provide additional notice where appropriate.

13. Contact

Questions or requests regarding this Privacy Policy can be sent through the Spinalith contact form.