Privacy Policy

Account data: when you register we store your email address, a display name, your role, credit balance, and optional country. Authentication is handled by Supabase Auth; passwords are stored only as secure hashes by the auth provider.

Documents you submit: documents, text, and URLs you run through audit tools and Labs are processed to generate your report. Extracted text and the resulting report are stored with your account so you can access your history.

StoryVerse content: stories, chapters, contributions, votes, discussions, wallet balances, and revenue records you create or earn on the platform.

Payment information: for manual (bank/UPI) payments we store your payment reference note and the payment proof you upload. Payment proofs are stored in a private storage bucket accessible only to you and platform administrators.

Support communications: support tickets and replies you send, including internal notes added by administrators.

• To operate your account, track credits, and deliver audit reports.
• To process AI analysis: document content may be sent to our AI providers (DeepSeek primary, Google Gemini fallback) to generate analysis. We send only the extracted text needed for the analysis; API keys are never exposed to your browser.
• To run OCR on scanned documents and images when direct text extraction is not possible.
• To operate StoryVerse: publish contributions, calculate votes, maintain author wallets and revenue shares, and process payouts you request.
• To review manual payment proofs and prevent payment fraud or platform abuse.
• To respond to support tickets.

We do not sell your personal data. Document content is shared with AI providers solely to generate the analysis you requested. StoryVerse contributions are, by design, visible to other community members and, once published, to readers. Payment proofs are visible only to you and platform administrators. We may disclose information when required by law.

• Row Level Security (RLS) restricts database access so users can read and modify only their own records.
• Payment proofs are stored in a private bucket; administrators access them through short-lived signed URLs.
• Server-side API routes perform all privileged operations; sensitive keys are never sent to the browser.

Audit history and reports are retained while your account is active. StoryVerse published works follow the platform's archive and retention periods configured by administrators. You may request account deletion by contacting support; we will remove your profile and personal data, except where we must keep records for legal or financial reasons.

Depending on your jurisdiction you may have rights to access, correct, export, or delete your personal data. You can update your display name and country on the Account page. For other requests, open a support ticket.

We use essential cookies to keep you signed in and to remember your theme preference (light/dark). We do not use advertising or third-party tracking cookies.

Questions about this policy? Open a ticket via the Support page.