Privacy Policy

1. Who We Are

This Privacy Policy describes how P9NW, a sole proprietorship owned by James D. Davis, doing business as Storyverse Systems ("Storyverse Systems," "we," "us," or "our"), collects, uses, and shares personal information when you use our Services.

Our business address is 1105 Sandy Valley Rd, White Haven, PA 18661, United States. For any privacy-related questions, email jdavis@storyversesystems.com.

2. What This Policy Covers

This policy applies to all Services, including:

• storyversesystems.com and all subdomains
• The Storyverse Author web application
• Framework Packages, Starter Kits, and free downloads
• The Story Architect newsletter
• Customer support communications

3. Information We Collect

Information You Give Us

• Account information: name, email address, username, password (stored hashed)
• Payment information: billing address, payment method details. Full card numbers are handled by Stripe and never stored on our servers.
• Profile information: any optional details you add to your profile, including pen names, writer bios, and profile images
• User Content: characters, stories, worlds, scenes, notes, bookmarks, uploaded images, and any other content you create or upload using the App
• Communications: emails you send us, support requests, feedback, survey responses

Information Collected Automatically

• Log data: IP address, browser type, operating system, referring URL, pages visited, timestamps
• Device data: device type, screen size, device identifiers
• Usage data: features used, actions taken in the App, membership tier, session duration
• Cookies and similar technologies: see Section 7

Information from Third Parties

• Payment providers: Stripe confirms successful payments and provides last-four digits of your payment method
• Membership provider: OptimizeMentor tracks your membership tier and renewal status

4. How We Use Your Information

We use your information to:

• Provide, operate, and maintain the Services
• Process payments and manage memberships
• Send transactional emails (account confirmations, password resets, purchase receipts, billing notices)
• Send The Story Architect newsletter and marketing emails (you can unsubscribe anytime)
• Personalize your experience (for example, routing you to the right subdomain based on your membership tier)
• Moderate uploaded images to detect policy violations
• Respond to support requests
• Analyze usage patterns to improve the Services
• Detect, prevent, and investigate fraud or abuse
• Comply with legal obligations

5. Legal Basis for Processing (EEA/UK Users)

If you are in the European Economic Area or United Kingdom, we process your personal data on the following legal bases:

• Contract: to provide the Services you've signed up for
• Consent: for marketing emails and optional analytics (you can withdraw consent anytime)
• Legitimate interests: to operate, secure, and improve the Services, and to prevent fraud
• Legal obligation: to comply with applicable laws

6. Who We Share Information With

We do not sell your personal information. We share it only with the following categories of recipients, and only as needed to operate the Services:

We may also disclose information when legally required (court order, subpoena, law enforcement request) or to protect our rights, your safety, or the safety of others.

If P9NW is ever sold, merged, or otherwise transferred, your information may be part of that transaction. You'll be notified by email before your information becomes subject to a different privacy policy.

7. Cookies and Tracking

Cookies We Use

• Essential cookies: for authentication, session management, and security. These can't be disabled without breaking the Services.
• Preference cookies: to remember your settings (like theme choice)
• Analytics cookies: Google Analytics uses cookies to understand how visitors use the site. You can opt out at tools.google.com/dlpage/gaoptout.

Do Not Track

Our site does not respond to Do Not Track signals. We do not track you across other websites, and we do not allow third-party advertising networks to track your activity on our site.

8. Data Retention

We keep your personal information only as long as we need it:

• Account data: until you delete your account, plus up to 90 days in backup systems
• Payment records: at least 7 years, as required by U.S. tax law
• Newsletter subscriptions: until you unsubscribe, plus retention of unsubscribe status to honor your preference
• User Content: while your account is active. Deleted content is removed from backups within 90 days.
• Support communications: up to 3 years after resolution
• Analytics data: up to 26 months (Google Analytics default)

9. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: request a copy of the personal information we hold about you
• Correction: request correction of inaccurate information
• Deletion: request that we delete your personal information
• Export: request an export of your data in a portable format
• Restriction: request that we limit how we process your information
• Objection: object to certain processing, including direct marketing
• Withdraw consent: withdraw consent where processing is based on consent
• Opt out of marketing: unsubscribe from emails by clicking the link in any marketing email

To exercise these rights, email jdavis@storyversesystems.com. We will respond within 30 days. We may ask you to verify your identity before acting on your request.

California Residents (CCPA/CPRA)

California residents have additional rights, including the right to know what categories of personal information we collect, the right to delete, the right to opt out of "sale" or "sharing" of personal information (we do neither), and the right not to be discriminated against for exercising these rights.

EEA/UK Residents (GDPR)

You have the right to lodge a complaint with your local data protection authority if you believe we have violated your rights.

10. Children's Privacy

The Services are not directed to children under 13. We do not knowingly collect personal information from children under 13.

Users between 13 and 17 may use the free tier with parent or guardian consent, but may not purchase paid memberships or Framework Packages. See our Terms of Service for details.

If you believe we have inadvertently collected information from a child under 13, contact us at jdavis@storyversesystems.com and we will delete it promptly.

11. Security

We use industry-standard security measures to protect your information:

• HTTPS encryption for all data in transit
• Password hashing (we never store plain-text passwords)
• Access controls on our database and file storage
• Regular security updates and monitoring
• JWT-based session tokens with expiration

No system is perfectly secure. If we discover a data breach that affects your personal information, we'll notify you by email within 72 hours and comply with all applicable breach-notification laws.

12. International Data Transfers

We are based in the United States, and the service providers we use are primarily based in the United States. If you access the Services from outside the U.S., your information will be transferred to, stored, and processed in the U.S.

By using the Services, you consent to this transfer. Where required, we rely on Standard Contractual Clauses or other legal mechanisms to safeguard international transfers.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we'll update the "Last updated" date at the top. Material changes will be communicated by email to account holders and by a notice on the site at least 14 days before taking effect.

14. Contact