Privacy Policy

1. Introduction

Quilloom ("the Platform," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our interactive storytelling platform. By using the Platform, you consent to the data practices described in this policy.

2. Information We Collect

Account Information: When you create an account, we collect your name, email address, and authentication credentials. Your role (admin or user) is assigned by the Platform.

Profile Information: You may optionally provide a display name, bio, and external links for your author profile. This information may be visible to other users if you choose to make your profile public.

Story and Journal Data: We store all content you create on the Platform, including story states, character profiles, settings, chapter content, book journal entries, character journal entries, and story choices. This content is associated with your account.

Payment Information: When you make a purchase, payment processing is handled by Base44 Payments (powered by Wix). We do not store your full credit card or payment details. We retain records of transactions (product purchased, price, date, status) for account management and record-keeping.

Engagement Data: We track points, badges, story progress, follower/following relationships, and comments you post, as part of the Platform's gamification and social features.

Usage Data: We may collect information about how you interact with the Platform, including pages visited, features used, timestamps, and device information, for analytics and service improvement.

Technical Data: We may collect IP addresses, browser type, and operating system information for security and operational purposes.

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Platform's features and services
• Authenticate your identity and manage your account
• Generate AI-powered story content based on your inputs and choices
• Process payments and manage subscriptions
• Track story progress, points, and badges
• Facilitate social features (following, comments, author profiles)
• Send journal reminders and platform-related email notifications
• Operate the marketplace, including listing and purchasing stories
• Detect, prevent, and address fraud, abuse, and security issues
• Comply with legal obligations
• Analyze usage patterns to improve user experience

4. AI Processing

When you use the Platform's story generation, journal suggestion, or AI coaching features, your story data, character information, and journal entries are sent to AI language model providers for processing. This data is used to generate story content, writing prompts, and creative suggestions. We use reputable AI providers, but their data handling is governed by their respective privacy policies. We do not control how third-party AI providers retain or process data beyond the initial request.

5. Data Sharing

We may share your information with:

• Service Providers: Third-party services that help us operate the Platform, including AI providers, Base44 Payments (Wix) for payment processing, email delivery services, and hosting infrastructure
• Other Users: Your public author profile, shared stories, comments, and follower information may be visible to other users as part of the Platform's social features
• Legal Authorities: When required by law, court order, or when we believe disclosure is necessary to protect the rights, property, or safety of the Platform, our users, or others
• Business Transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred as part of the transaction

We do not sell your personal information to third parties.

6. Data Security

We implement reasonable technical and organizational measures to protect your data, including encryption, access controls, and row-level security on user data. However, no method of transmission or storage is completely secure. We cannot guarantee absolute security of your data. You are responsible for maintaining the confidentiality of your account credentials.

7. Data Retention

We retain your data for as long as your account is active and as needed to provide the Platform's services. Story content, journal entries, and associated data are retained until you or we delete them. Points, badges, purchase records, and transaction data may be retained for longer periods for record-keeping and legal compliance. Upon account termination, we may delete your data within a reasonable period, except where retention is required by law.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data and account
• Object to or restrict certain processing of your data
• Withdraw consent for data processing where consent is the legal basis
• Export your story content (requires purchase of the Story Export feature)

To exercise these rights, contact the Platform administrator through in-app support channels. We will respond to your request within a reasonable timeframe, subject to applicable law.

9. Cookies and Tracking

The Platform may use cookies and similar tracking technologies to maintain your session, remember preferences, and analyze usage. You can control cookies through your browser settings, but disabling them may affect the Platform's functionality.

10. Content Monitoring & Oversight

The Platform actively monitors all user-generated content for compliance with the Terms of Use through the following oversight mechanisms:

• Protector Agent: An automated AI-powered content moderation system scans all user stories (premises, chapter content, summaries, descriptions) and all comments and ratings (both approved and pending) for Terms of Use violations.
• What is Monitored: All story content, chapter text, journal entries, character journals, author profiles, comments, ratings, and sale listings — regardless of whether the content is public, private, listed for sale, or pending approval.
• Data Analyzed: When content is scanned, the AI analyzes the text to identify prohibited material. The content itself, along with metadata (author ID, creation date, content type), is processed to generate violation reports.
• Violation Reports: When a potential violation is detected, a detailed report is emailed to the Platform administrator. This report includes: who (user identity and email), what (the violating content), when (date and time), where (location on the Platform), why (reason for the violation), which (the specific Term violated), and how (how the violation was detected).
• Investigation: No enforcement action is taken until the Platform administrator has conducted a thorough investigation and rendered a judgment on the user's actions or behavior. During investigation, the administrator may review the user's content, account history, and behavior patterns.

This monitoring is conducted to protect the community and ensure a safe environment for all users. It is an ongoing process that applies to all content on the Platform at all times.

11. Consequences & Account Actions

If, after investigation and judgment, a user is found to have violated the Terms of Use, the following enforcement actions may be taken:

• Story Removal: The violating story or stories will be removed, and the user will permanently lose access to them, including all associated content (chapters, journals, character data, sale listings). Removed content cannot be recovered.
• Account Removal: The user's account will be permanently terminated. The user will lose access to all content, data, purchases, points, badges, and the Platform itself. Account removal is permanent and the user will not be permitted to create a new account.

In the course of enforcement, the following personal data may be accessed, reviewed, and included in violation records:

• Account information (name, email, user ID)
• All content created by the user (stories, journals, comments, ratings)
• Account history and activity logs
• Transaction and purchase records
• Social data (followers, following, comments received)

Violation records and enforcement documentation are retained by the Platform administrator for record-keeping and to prevent users who have been removed from re-registering. This data is only accessible to the Platform administrator and is not shared with other users.

12. Social Features

If you make your author profile public, share stories, or leave comments, certain information (display name, bio, stories, ratings, comments) will be visible to other users. You can control the visibility of your profile and individual stories through your account settings. Follower and following relationships are visible to you and may be visible to other users.

13. Children's Privacy

The Platform is not intended for children under the age of 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it. Story content involving minors in sexual situations is strictly prohibited, will be flagged by the Protector Agent, and will result in immediate investigation and likely permanent account removal.

14. Marketplace Data

If you list stories for sale, your author display name, story titles, descriptions, and pricing will be publicly visible on the marketplace. Purchase records, including buyer and seller information, transaction amounts, and platform fees, are retained for financial record-keeping. Author earnings data is associated with your account. Marketplace listings are also subject to content monitoring as described in Section 10.

15. International Data Transfer

Your data may be stored and processed on servers located in countries other than your own. By using the Platform, you consent to the transfer of your data to these countries, which may have different data protection laws. We take reasonable steps to ensure your data is protected regardless of where it is processed.

16. Changes to This Policy

We reserve the right to modify this Privacy Policy at any time. Changes will be effective immediately upon posting the updated policy on the Platform. Your continued use of the Platform after any changes constitutes acceptance of the revised policy. We encourage you to review this policy periodically.

17. Contact

If you have questions or concerns about this Privacy Policy or how your data is handled, please contact the Platform administrator through the in-app support channels.