Privacy Policy
Last Updated: September 10, 2026
NovelForge AI ("we", "our", or "us") respects and protects your privacy. This Privacy Policy ("Policy") explains how we collect, use, store, and share your personal information when you use our AI writing assistant services (the "Service").
1. Data Controller
The data controller for this Service is:
- Company: NovelForge AI
- Contact Email: privacy@novelforge.ai
2. Information We Collect
2.1 Information You Provide
- Account Information: Email address, display name, and password (encrypted) when you register
- Payment Information: Transaction amount, payment status. We do not store full card numbers — card data is processed by our payment processor (see Section 5)
- Communication Records: Emails, support tickets, and feedback you send to our support team
- Creative Content: Text you write, upload, or generate using our platform, including characters, plot outlines, chapters, and world-building content
2.2 Information We Automatically Collect
- Device & Network: IP address, device model, operating system, browser type, timezone
- Usage Behavior: Page views, feature access, operation logs, session duration
- Log Data: Request timestamps, error logs, performance data
3. How We Use Your Information
| Purpose | Legal Basis |
|---|---|
| Provide & maintain Service | Contract performance |
| Billing & payment processing | Contract performance |
| Customer support | Contract performance / Legitimate interest |
| Service notifications (billing, security, policy updates) | Legitimate interest |
| Security & fraud prevention | Legitimate interest |
| Product optimization & analytics | Legitimate interest |
| Legal compliance | Legal obligation |
4. Cookies & Tracking
| Type | Purpose | Can Be Disabled |
|---|---|---|
| Strictly Necessary | Maintain session, core functionality | No |
| Functional | Language preferences, personalized settings | Yes |
| Analytics | Anonymous usage statistics, product optimization | Yes |
| Marketing | Targeted advertising (if applicable) | Yes |
We use essential cookies to maintain your session and authentication. We do not use third-party advertising tracking cookies.
5. Data Sharing & Disclosure
We do not sell your personal information, including "selling" as defined by applicable laws such as CCPA. We only share information in the following circumstances:
- Service Providers: Cloud computing, payment processing, customer support, and analytics vendors, bound by confidentiality agreements. Payment card data is processed exclusively by Waffo Pancake, our PCI-DSS compliant payment processor, and is not stored on our servers.
- Legal & Regulatory: As required by law, court order, or legitimate government request
- Business Transfers: In case of merger, acquisition, or similar corporate transaction, with advance notice and continued protection obligations
- With Your Consent: For any other purposes, only with your explicit prior consent
6. Data Security
- Transmission Encryption: TLS/HTTPS
- Storage Security: Passwords and sensitive data are encrypted or hashed
- Access Control: Minimum privilege principle; employees sign confidentiality agreements
- Regular Security Audits: Periodic vulnerability scanning
In the event of a security breach affecting your rights, we will notify you within 72 hours of discovery, in accordance with applicable law. Please keep your account credentials secure and do not share them with others.
7. Data Retention
| Data Type | Retention Period | After Expiry |
|---|---|---|
| Account Information | During active period; 90 days after account deletion | Delete or anonymize |
| Transaction Records | As required by law (typically 7 years) | Delete or archive |
| Support Records | 2 years | Secure deletion |
| Security Audit Logs | 12 months | Secure deletion |
| Creative Content | Until user deletes or requests deletion | Delete on user request |
8. Your Data Rights
To exercise the following rights, contact us. We will process requests within 30 calendar days.
| Right | Description |
|---|---|
| Right to Know | Understand what data we collect and how we use it |
| Right to Access | Get a copy of your personal data |
| Right to Correction | Correct inaccurate or incomplete data |
| Right to Deletion | Request deletion under specific conditions |
| Right to Restrict Processing | Pause data processing under specific conditions |
| Right to Data Portability | Receive data in machine-readable format |
| Right to Object | Object to processing based on legitimate interest or marketing |
| Right to Withdraw Consent | Withdraw consent for consent-based processing |
If you believe we have not properly handled your data, you have the right to lodge a complaint with your local data protection authority.
9. Marketing Communications
With your consent, we may send marketing information via email. You can unsubscribe at any time by clicking the "unsubscribe" link in emails, disabling marketing notifications in account settings, or contacting us. Unsubscribe does not affect service-related notifications (billing, security, policy updates).
10. International Data Transfers
Our servers and partners may be located in various regions including Singapore and the United States. For cross-border transfers, we ensure data security through Standard Contractual Clauses (SCC), adequacy decisions, or other legally approved mechanisms.
11. Children's Privacy
Our Service is intended for users 18 years and older. We do not knowingly collect information from users under 18. If you believe your child has provided us with information, please contact us immediately and we will promptly delete it.
12. Third-Party Links & Services
Our Service may contain links to third-party websites or integrate with third-party services. This Policy applies only to information we directly collect. We are not responsible for third-party data practices. Please review their policies before using.
13. Policy Changes
We may update this Policy from time to time. For material changes, we will notify you at least 15 days in advance via email or platform notice, and update the "Last Updated" date at the top of this page. Continued use after changes constitutes acceptance.
14. Contact Us
- Privacy Contact: privacy@novelforge.ai
- Customer Support: support@novelforge.ai
- Support Hours: Monday to Friday, 09:00–18:00 UTC+8