Privacy Policy
Effective 2026-11-01
SEOKYOUNGRYU (the “Operator”, “we”) runs Novel Studio (the “Service”). This policy explains how we handle your personal data. If the Korean and English versions differ, the Korean version prevails for users in Korea.
1. What we collect and why
| Context | Data | Purpose |
|---|---|---|
| Sign-up and login (Google, Kakao) | Email, name or nickname, profile picture URL, login provider, account ID | Identifying you, keeping you logged in, answering inquiries |
| Saving stories (when logged in) | The story data you write (settings, plots, manuscripts) | Cloud storage and sync across devices |
| Usage records | Feature usage events (e.g. story created, number of AI requests), a random per-browser ID, timestamps | Improving the Service and usage statistics. Your manuscript text is not included. |
| AI usage (when logged in) | Number of AI requests per account per day | Applying daily limits and preventing abuse |
| AI trial without an account | A one-way hash of your IP address, a random per-browser ID, trial count and start time | Limiting the trial to once and preventing abuse. We never store your raw IP address. |
| Pro launch alerts (optional) | Email, features of interest, preferred price range | Sending the launch notice and designing pricing |
| Feedback (optional) | Your message and the page it was sent from | Improving the Service |
If you use the Service without logging in, your stories and settings stay in your browser and are not sent to us. When you use AI features, the request content is sent to Google as described in section 4.
AI requests pass through our server (Cloudflare), which forwards them to Google using the Operator’s Gemini API key. We only relay the request; we do not store its content.
2. Legal bases (EEA/UK users)
We process data to provide the Service you ask for (performance of a contract), to keep it secure and improve it (legitimate interests), and, where required, with your consent (for example, personalized ads). You can withdraw consent at any time.
3. How long we keep data
- Account data and stories: deleted immediately when you delete your account
- Usage records: 1 year from collection. On account deletion they are unlinked from you and kept only as statistics.
- AI trial records: 1 year from collection
- Pro launch alert sign-ups: deleted after the notice is sent or upon request
- Longer where the law requires
4. Service providers and international transfers
| Provider | Location | Data | Purpose | Retention |
|---|---|---|---|---|
| Supabase, Inc. | Data stored in Seoul, South Korea; company in the USA | Account data, stories, usage records (section 1) | Authentication and database | As in section 3 |
| Cloudflare, Inc. | USA and the Cloudflare location nearest to you | Access logs; AI request content (relayed, not stored) | Website hosting and AI relay | Not stored after relaying (except system logs) |
| Google LLC (Gemini API) | USA | Story text and instructions you send to the AI | Generating AI output | Per Google’s terms |
Requests processed under Google’s free (unpaid) quota may be used to improve Google’s products and may be read by human reviewers, according to the Gemini API terms. If you do not want this, use the Service without the AI features. AI features are currently not offered in the EEA, the UK, or Switzerland.
5. Sharing
We do not sell or share your personal data with third parties, except as required by law.
6. Deletion
When the retention period ends or the purpose is fulfilled, we delete the data from our database without undue delay so it cannot be restored.
7. Your rights
You can ask to access, correct, delete, or restrict processing of your data, and (in the EEA/UK) to receive a copy or object to processing. You can delete your account and stories yourself on the Account page; send other requests to the contact below. EEA/UK users may also complain to their local data protection authority.
8. Browser storage and cookies
We use browser storage (IndexedDB, localStorage) to save your stories, keep you logged in, and remember settings. Clearing site data in your browser also removes stories saved without an account.
Our information pages (guides and pricing) show Google AdSense ads. Google and its partners may use cookies and similar technologies to show ads based on your visits to this and other sites. Your manuscripts are never used for ads, and the writing screen has no ads. Where required, we ask for your consent first.
You can turn off personalized ads in Google Ad Settings. Learn more in Google’s advertising policies.
9. Security
- All traffic is encrypted (HTTPS)
- Row-level access control in the database: you can only read and write your own stories
- Administrative keys are used only on the server, and administrator access is restricted
10. Children
The Service is not intended for children under 14, or under the minimum age for consent in your country (16 in some EU countries).
11. Contact
Data controller: SEOKYOUNGRYU
Contact: whtkrl@gmail.com
12. Changes
We will announce changes to this policy on the Service at least 7 days before they take effect.