Privacy Policy

1. Who we are

The Service is provided by PavlEx Incorporated. For any privacy question or request, contact us at support@narratiq.app. References to “Narratiq” refer to the Service; PavlEx Incorporated is the legal entity responsible for it and acts as the data controller.

2. Information we collect

We collect the following categories of information:

• Account information. When you register, we collect your email address and, if you sign in with Google, your name and profile image. We do not receive your Google password.
• Content you create. Screenplays, scripts, projects, notes, story-vault entries, and other material you write or upload to the Service.
• Billing information. If you purchase a paid plan, our payment processor (Stripe) collects and processes your payment details. We do not store full payment-card numbers; we retain only limited billing metadata such as plan, status, and the last four digits of a card where provided.
• Optional AI provider keys (BYOK). If you choose to bring your own API key for a third-party AI provider, we store it in encrypted form and use it only to make requests you initiate.
• Usage and device data. Aggregate, privacy-preserving analytics about how the Service is used (for example, page views and feature usage), plus standard server logs such as IP address, browser type, and timestamps.

3. How we use your information

We use information to:

• provide, operate, maintain, and secure the Service;
• authenticate you and manage your account;
• process payments and administer subscriptions;
• generate the AI-assisted features you request, such as coverage, diagnostics, and suggestions;
• respond to your requests and provide support;
• detect, prevent, and address fraud, abuse, and technical issues; and
• comply with legal obligations and enforce our Terms of Service.

4. AI features and your content

When you use an AI feature, the relevant content is transmitted to our AI provider(s) — which may include Anthropic, Google, and OpenAI — solely to generate the requested output and return it to you.

We do not sell your content, and we do not use your scripts or other content to train AI or machine-learning models. We instruct our AI providers not to use content submitted through the Service to train their models, consistent with their enterprise and API terms. If you supply your own provider key (BYOK), your requests are governed by that provider’s terms as well.

5. Service providers (subprocessors)

We share information with vetted third parties that process data on our behalf, only as needed to run the Service:

• Supabase — authentication, database, and file storage;
• Cloudflare R2 — object storage for uploaded and processed files;
• Vercel — application hosting and privacy-preserving web analytics;
• Stripe — payment processing and subscription billing;
• Resend — transactional email delivery;
• Google — optional single sign-on (OAuth); and
• Anthropic, Google, and OpenAI — AI model inference for requested features.

Each provider is bound by contractual obligations to protect your information. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

6. Legal disclosures

We may disclose information if required to do so by law or in the good-faith belief that such action is necessary to comply with legal process, enforce our Terms, protect the rights, property, or safety of PavlEx Incorporated, our users, or the public, or in connection with a merger, acquisition, financing, or sale of assets (in which case we will require the recipient to honor this Policy).

7. Data retention

We retain your information for as long as your account is active or as needed to provide the Service. You may delete your content at any time, and you may request deletion of your account by contacting us. We may retain limited information as required for legal, accounting, fraud-prevention, or dispute-resolution purposes after account closure.

8. Security

We use technical and organizational measures designed to protect your information, including encryption in transit, encryption of stored BYOK keys, access controls, and row-level database security. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

9. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to withdraw consent. California residents have rights under the CCPA/CPRA, and residents of the EEA and UK have rights under the GDPR/UK GDPR. To exercise any right, email support@narratiq.app. We will not discriminate against you for exercising these rights. You can also access and edit most of your information directly within the Service.

10. International data transfers

We are based in the United States and process information there. If you access the Service from outside the United States, you understand that your information may be transferred to, stored, and processed in the United States and other countries where our providers operate, which may have different data-protection laws than your jurisdiction.

11. Children's privacy

The Service is intended only for users who are 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected such information, we will delete it. If you believe a minor has provided us information, contact support@narratiq.app.

12. Changes to this Policy

We may update this Policy from time to time. When we do, we will revise the “Last updated” date above and, for material changes, provide additional notice where appropriate. Your continued use of the Service after changes take effect constitutes acceptance of the revised Policy.

13. Contact us

Questions about this Policy or our data practices? Contact PavlEx Incorporated at support@narratiq.app.