Privacy Policy

1. Data Controller

The data controller responsible for your personal data is:

Plotti Email: [email protected]

If you are located in the European Economic Area (EEA), you may also contact our data protection representative at the address above.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Username / display name
• Password (stored in hashed form)
• Authentication data from third-party login providers (if applicable)

2.2 Profile Information

Any additional information you voluntarily provide, such as avatar, bio, or preferences.

2.3 User Content

• Stories, visual novels, and characters you create
• Comments, feedback, and interactions with other users' content
• Messages and conversations within the Platform
• Choices and responses made during interactive story sessions

2.4 Usage Data

• Pages visited, features used, and actions taken on the Platform
• Session duration and frequency of use
• Search queries and content preferences
• Referral sources and navigation paths

2.5 Device and Technical Data

• IP address (anonymized for analytics purposes)
• Browser type and version
• Operating system
• Device type and screen resolution
• Language and timezone settings

2.6 Cookies and Similar Technologies

See Section 7 for details on our use of cookies and tracking technologies.

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

You may withdraw your consent at any time through your account settings or by contacting us. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

4. How We Use Your Information

4.1 Service Provision

• Operating and maintaining the Platform
• Processing and managing your account
• Providing customer support
• Delivering content and features you request

4.2 Platform Improvement

• Analyzing usage patterns to improve user experience
• Developing new features based on user behavior and feedback
• Fixing bugs and improving performance
• A/B testing of features and interfaces

4.3 AI and Machine Learning

• Content Generation: AI models power character interactions and story generation. Your inputs during story sessions are processed in real-time to generate responses.
• Content Moderation: Automated AI systems review content for policy compliance.
• Recommendations: We analyze usage patterns to recommend content you may enjoy.
• Model Improvement: We may use anonymized and aggregated interaction data to improve our AI models. Individual content is not used as direct training data without explicit consent.
• Opt-Out: You may opt out of having your data used for AI model improvement through your account settings or by contacting [email protected]. Opting out will not affect your ability to use the Platform.

4.4 Safety and Security

• Detecting and preventing fraud, abuse, and security threats
• Enforcing our Terms of Service and community guidelines
• Protecting the rights and safety of our users

4.5 Communications

• Service-related announcements (account, security, policy changes)
• Marketing communications (only with your consent; you can unsubscribe at any time)

5. Data Sharing and Third Parties

We do not sell your personal data. We may share your data with the following categories of third parties:

All third-party service providers are contractually obligated to protect your data and may only process it as instructed by us.

We may also disclose your information:

• When required by law, regulation, or legal process
• To protect the rights, property, or safety of Plotti, our users, or the public
• In connection with a merger, acquisition, or sale of assets (with prior notice to users)

6. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have different data protection laws.

When we transfer data outside of the EEA/UK, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions by the European Commission
• Other legally recognized transfer mechanisms

7. Cookies and Tracking Technologies

7.1 What We Use

7.2 Third-Party Cookies

We may use third-party analytics services that set their own cookies. These are subject to the respective third party's privacy policies.

7.3 Managing Cookies

You can control cookies through your browser settings. Disabling essential cookies may affect Platform functionality. You can manage non-essential cookie preferences through our cookie settings (when available) or your browser.

8. Data Retention

We retain your data for the following periods:

After the retention period, data is permanently deleted or irreversibly anonymized.

When you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., resolving disputes, enforcing agreements).

9. Data Security

We implement industry-standard security measures to protect your data:

• Encryption of data in transit (TLS/SSL) and at rest
• Regular security assessments and penetration testing
• Role-based access controls and authentication
• Monitoring and alerting for suspicious activities
• Regular backups with encryption
• Incident response procedures

No system is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

10. Children's Privacy

Plotti is not intended for children under 13 (or 16 in EEA jurisdictions without parental consent).

• We do not knowingly collect personal data from children below these age thresholds.
• If we become aware that we have collected data from a child without appropriate consent, we will take steps to delete it promptly.
• Parents or guardians who believe their child has provided data without consent should contact us at [email protected].

For users between 13 and 18, we apply additional safeguards, including restricted content exposure and limited data processing.

11. Your Rights

All Users

Regardless of your location, you have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and associated data
• Download a copy of your data (data portability)
• Opt out of AI model training and marketing communications

EEA/UK Users (GDPR)

If you are located in the EEA or UK, you additionally have the right to:

• Restrict processing of your data
• Object to processing based on legitimate interest
• Withdraw consent at any time
• Lodge a complaint with your local data protection authority
• Not be subject to solely automated decision-making with legal effects

California Users (CCPA/CPRA)

If you are a California resident, you additionally have the right to:

• Know what personal information is collected, used, and shared
• Delete your personal information
• Opt out of the sale or sharing of personal information (note: we do not sell personal data)
• Non-discrimination for exercising your privacy rights

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days (or as required by applicable law).

12. Automated Decision-Making

Plotti uses automated systems for:

• Content Moderation: AI reviews content for policy compliance. Automated decisions to remove content may be appealed through our support team.
• Account Enforcement: Repeated violations detected by automated systems may trigger account restrictions. You may request human review of any automated enforcement decision.
• Content Recommendations: Algorithmic recommendations based on your preferences and behavior. You can reset or adjust these through your settings.

We do not use automated decision-making for decisions that produce significant legal effects on you without human review.

13. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights:

• We will notify affected users without undue delay, and no later than 72 hours after becoming aware of the breach (where feasible).
• We will notify the relevant data protection authority as required by applicable law.
• Notification will include the nature of the breach, likely consequences, and measures taken or proposed.

14. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes:

• We will provide at least 14 days notice through the Platform or via email.
• The updated policy will indicate the new "Last Updated" date.
• Your continued use after the effective date constitutes acceptance.

We encourage you to review this policy periodically.

15. Contact Us

For any privacy-related questions, concerns, or requests:

• Privacy inquiries: [email protected]
• Data protection requests: [email protected]
• General support: [email protected]

---

Last Updated: January 2025