novquillPrivacy Policy
How novquill collects, uses, and protects your personal data when you use novquill.com.
Last updated: June 8, 2026
1. Who processes your data
The operator of novquill ("we") processes personal data of users of novquill.com and related apps. Data enquiries: hello@novquill.com.
2. What data we collect
Account: email, user ID, profile name (if provided), plan and subscription status. Content: uploaded book texts (.txt), analysis results, character chats, generated portraits, public links (if you enable them). Technical: IP address, browser type, interface language, cookies and local storage (session, cookie consent). Payments: Stripe customer ID and subscription status — full card details are processed by Stripe; novquill does not store them. Analytics (with consent): de-identified product usage events without book text or chat messages.
3. Purposes and legal bases
We process data to: provide the service (sign-up, analysis, chat, library); perform our contract with you (Terms of Use); comply with law; pursue legitimate interests (security, abuse prevention, product improvement); with your consent — analytics cookies (PostHog). You can withdraw consent for non-essential cookies via the site banner.
4. Uploaded books and chats
Book texts and conversations are stored in your account and are not visible to other users unless you enable public access (e.g. a share link). We do not use your books or chats to train public models or sell them to advertisers. When you delete your account, related books, characters, and chats are removed within reasonable time, subject to backups and legal requirements.
5. AI processing
For analysis and character replies, text fragments are sent to language model providers (Google Gemini, OpenRouter, etc.) over encrypted channels. We send only what is necessary. See the AI Policy for details. We do not send book text or chat messages to PostHog analytics.
6. Recipients and processors
Data may be processed by trusted vendors: Supabase (auth, database, file storage — EU regions); Stripe (subscription payments); PostHog (analytics, EU hosting — with consent only); AI providers (Gemini, OpenRouter, etc.) for analysis and chat; Cloudflare (app hosting). Each is bound by data protection obligations as required by GDPR.
7. Cookies and local storage
Strictly necessary cookies are required for sign-in, language, and security. Analytics cookies run only with your consent. Full list and controls — on the Cookie Policy page.
8. Retention
Account data is kept while the account is active. After deletion — removed within 30–90 days unless law requires longer retention (e.g. payment records). Security and technical logs — up to 12 months. Guest demo sessions without registration are not tied to a permanent profile and may be cleared sooner.
9. Security
Connections use HTTPS. Row Level Security in the database limits each user to their own data. Passwords are managed by Supabase Auth and are not stored in plain text in novquill. Data at rest is encrypted by our cloud provider. No internet transmission is perfectly secure — we apply reasonable organizational and technical measures.
10. Your rights
Depending on your jurisdiction (including GDPR), you may: access your data; rectify inaccuracies; erase data; restrict processing; object; data portability; withdraw consent. Delete your account in settings or email hello@novquill.com. You may lodge a complaint with your local data protection authority.
11. International transfers
Primary infrastructure is in the EU. Some vendors (AI providers, Stripe) may process data in other countries. We rely on GDPR mechanisms (standard contractual clauses, adequacy decisions) where applicable.
12. Minors
The service is not intended for users under 16 without parental or guardian consent. If you believe a child provided data without permission, email hello@novquill.com — we will help remove it.
13. Changes to this Policy
We may update this Policy. The current version is published at novquill.com/legal/privacy/ with the update date. Material changes may also be sent by email or shown in the product.
14. Contact
Personal data, account deletion, and privacy requests: hello@novquill.com. We respond within reasonable time.