Privacy Policy

Summary (provided for convenience only; the numbered provisions below control in the event of any conflict)

• Your chapters remain your property. We do not sell them, publish them, or use them to train our own models.
• No content you author becomes publicly accessible unless and until you affirmatively publish it, and only with respect to the specific entries you select. Raw chapter text is never published under any circumstance.
• To construct your world bible, chapter text is transmitted to a third-party AI provider (Google or Anthropic) for analysis and summarization. This is the sole instance in which your writing leaves our systems. See Section 4.
• We do not have access to your payment card information. All payment processing is handled directly by Stripe, Inc.
• Deletion is permanent. Deleting a novel deletes its associated chapters, entries, and notes.

1. Data Controller

Tidnum (the "Service") is operated by TIDNUM ("Company," "we," "us," or "our"), based in Minnestoa, United States. For any inquiry arising under this Privacy Policy, including requests to access, correct, or delete personal data, contact legal@tidnum.com.

2. Information We Collect

We collect only the categories of information necessary for the Service to function:

(a) Account Information. Your email address and pen name. Passwords are hashed by our authentication provider; we do not access or store passwords in plaintext.

(b) Content. Chapters you upload or paste, and all content derived therefrom, including entries (characters, locations, items, and lore), associated per-chapter notes, and generated wiki articles.

(c) Story Chat. If used, your queries and the corresponding AI-generated responses are retained to preserve conversation continuity across sessions. Any such conversation may be deleted at your discretion.

(d) Billing Information. A Stripe customer reference identifier, your subscription plan, its status, and renewal date. We do not collect or store your payment card number; card details are entered directly on Stripe's payment interface and do not transit our servers.

(e) Usage Data. Records of each AI-assisted operation performed (operation type, token consumption, associated cost, and duration), together with daily word- and run-count counters. This data powers your credit balance display and mitigates excessive resource consumption.

(f) Technical Data. Standard server logs maintained by our hosting provider, including IP addresses, timestamps, and error records. We do not employ advertising trackers, and we do not sell personal data to any third party.

3. Purposes of Processing

We process the information described above to: provide the Service you have requested, including storage of your manuscript; construct and display your world bible; publish your wiki upon your instruction; meter credit consumption; process payment; prevent abuse and control operational costs; and respond to support inquiries. We do not use your written content for marketing purposes, and we do not create behavioral profiles based on your content.

4. AI Service Providers

Construction of a world bible necessarily requires that an AI model process your chapter content. When you extract a chapter, generate a wiki article, or engage Story Chat, the relevant text is transmitted to the AI provider configured for your novel — either Google (Gemini) or Anthropic (Claude) — via each provider's commercial API offering.

Under the terms of those commercial API agreements, as currently represented by each provider:

• Anthropic states that it does not use API inputs or outputs to train its models, and deletes such data within thirty (30) days.
• Google states that it does not use content submitted through the paid Gemini API tier to improve its products. (Google's free tier does not carry this restriction, which is the reason we do not route manuscript content through it.)

These representations are made by the respective third-party providers, are outside our control, and are subject to change by those providers. Rather than paraphrase terms that may change, we direct you to each provider's current published terms: Google Gemini API Terms and Anthropic Commercial Terms. If this arrangement is not acceptable to you, please do not upload your manuscript, as the Service cannot operate without this processing step.

We do not train any proprietary model on your content, nor do we authorize any third party to do so.

5. Categories of Recipients

We limit the recipients of your data to the following service providers, engaged strictly as necessary to operate the Service:

• Supabase — database hosting and authentication services. Your account and content are stored on this infrastructure.
• Vercel — application hosting and content delivery, including certificate issuance for custom wiki domains.
• Stripe, Inc. — payment processing. Stripe acts as an independent controller with respect to your payment card data.
• Google and/or Anthropic — AI processing, as described in Section 4.

These providers may process data outside your country of residence. We do not disclose your data to any other party, except where required by applicable law.

6. Public Disclosure of Content

No content is publicly accessible unless and until you publish a wiki. Publication is configured on a per-novel and per-entry basis; you determine which entries are published and may unpublish any or all content at any time.

While a wiki is published, the following becomes accessible to any party in possession of the corresponding link: the novel's title, your pen name, the story overview, and the specific published entries (including their names, aliases, and associated articles). Raw chapter text is never published under any circumstance, whether via the wiki or any other public-facing mechanism. The same applies to unpublished entries, drafts, and Story Chat conversations.

7. Data Retention and Deletion

We retain your content for the duration of your account's existence, as continuous retention is necessary for the Service to function. You may delete a novel at any time via its settings, which permanently removes the associated chapters, entries, notes, and wiki. Deleting a Story Chat conversation permanently removes the corresponding messages.

To request deletion of your entire account, email legal@tidnum.com; we will delete your account and associated content. Certain records are retained beyond account deletion where legally required, including payment and invoice records (maintained by Stripe for tax and accounting compliance purposes) and aggregated usage data that no longer identifies you. Backup copies are purged according to our standard backup rotation schedule.

8. Your Rights

Regardless of jurisdiction, you may request access to, correction of, export of, or deletion of your personal data by contacting legal@tidnum.com. If you are located in the United Kingdom or European Economic Area (subject to the GDPR) or in California (subject to the CCPA/CPRA), you additionally have the statutory right to object to processing and to lodge a complaint with your applicable data protection authority. We do not "sell" or "share" personal information as those terms are defined under applicable law.

9. Security Measures

Data access is enforced at the database layer through row-level security policies, such that no account may access another account's content, and chapter text is not exposed through any public-facing route. Data in transit is encrypted. Payment card data does not reach our infrastructure at any point.

No system can guarantee absolute security, and we make no such representation. In the event we determine that a security incident has affected your data, we will notify you and any applicable regulatory authority as required by law. If you identify a security vulnerability, please report it to legal@tidnum.com; we will not pursue legal action against good-faith vulnerability disclosures.

10. Children's Privacy

The Service is not directed at, and is not intended for use by, individuals under the age of 13, and we do not knowingly collect personal data from children. If you believe a child has created an account, please contact us and we will remove it.

11. Changes to This Policy

Where a change to this Privacy Policy materially affects you — including the addition of a new data processor or a new use of your content — we will provide notice within the Service, presented to you the next time you sign in. Your continued use of the Service following such notice constitutes acceptance of the amended Policy. Non-material updates will be reflected by revising the effective date above.

Questions regarding this Privacy Policy may be directed to legal@tidnum.com. See also our Terms of Service.