Privacy Policy

This Privacy Policy explains how [COMPANY_NAME] (“we”) collects, uses, and shares information when you use Teddy’s Book Workshop (the “Service”). By using the Service, you agree to this Policy.

1. Information we collect

• Account information: your name and email address.
• Content you create: books, chapters, characters, outlines, style preferences, and other materials you enter or upload.
• Billing information: processed by Stripe. We receive limited details (such as subscription status and the last four digits of your card); we do not store full card numbers.
• Usage data: records of AI features used and approximate token consumption, plus standard server logs (such as IP address and timestamps) used for security and rate limiting.

2. How we use information

• To provide, maintain, and improve the Service;
• To generate the AI assistance you request (see Section 3);
• To process payments and manage subscriptions;
• To enforce usage limits and protect against abuse; and
• To communicate with you about your account.

3. AI processing and subprocessors

To generate drafts, outlines, and images, we send the relevant content you provide to third-party AI providers acting as our subprocessors. We share only what is needed to fulfill your request. We use, among others:

• Anthropic — AI text generation.
• Stripe — payment processing.
• [EMAIL_PROVIDER] — transactional email (sign-in codes).
• [HOSTING_PROVIDER] — application hosting and database.

We do not sell your personal information, and we do not use Your Content to train our own models.

4. Children’s privacy

The Service is intended for use by adults (including parents and guardians who may create books with or for children). It is not directed to children under 13, and we do not knowingly collect personal information directly from children. If you believe a child has provided us personal information, contact [CONTACT_EMAIL] and we will delete it.

5. Data retention

We retain your account information and content for as long as your account is active. You may delete your content or request account deletion at any time; we will delete or de-identify your data within a reasonable period, except where we must retain it to comply with legal, tax, or security obligations.

6. Security

We use technical and organizational measures to protect your information, including encrypted connections and access controls. No system is perfectly secure; we cannot guarantee absolute security.

7. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact [CONTACT_EMAIL]. We will respond as required by applicable law.

8. International users

We may process and store information in countries other than where you live. Where required, we implement appropriate safeguards for cross-border transfers.

9. Changes and contact

We may update this Policy from time to time; we will post the new effective date and, for material changes, notify you by email or in-app. Questions or requests: [CONTACT_EMAIL], [COMPANY_NAME], [COMPANY_ADDRESS].