Privacy Policy

1. Who we are

WordCrafter.Pro is operated by DragonWorks Publishing. When this policy says "we," "us," or "our," it means DragonWorks Publishing. When it says "you," it means the person using WordCrafter.Pro.

Questions about this policy: support@wordcrafter.pro

2. What we collect

Account data. When you create an account we collect your email address and a hashed password (we never store your password in plaintext). If you sign in via Google, we receive your email and public profile name from Google.

Billing data. Subscription payments are processed by Freemius, our Merchant of Record. Freemius handles all payment data and global tax compliance (VAT, GST, sales tax). We store a Freemius license ID so we can manage your subscription. We never see or store your full card number — Freemius handles all payment data.

Writing content. The documents, series, books, and notes you create in WordCrafter.Pro are stored in our database (Supabase) so you can access them from any device. This content belongs to you.

AI API keys. You may provide your own API keys for OpenRouter, Google Gemini, and/or OpenAI so the AI features work. These keys are encrypted at rest using AES-256 with a server-side secret. They are decrypted only inside our servers when making an AI request on your behalf and are never sent to the browser.

AI conversation history. Messages you send to the AI skill panels are stored so your conversation context persists across sessions. This data is tied to your account and is not used to train any AI model.

Usage and analytics. We use PostHog to collect anonymised analytics: page views, feature usage counts, and session data. No personally identifiable writing content is sent to PostHog. You can opt out of PostHog tracking by enabling "Do Not Track" in your browser.

Location data (coarse). When you access the app, Vercel's infrastructure automatically detects your approximate country and city from your IP address. We store the country code and city name on your profile. This is used only for our own geographic analytics — it is never sold or shared. We do not store your precise location or IP address.

Log data. Our hosting provider (Vercel) automatically collects standard server logs: IP address, browser type, pages visited, and timestamps. These logs are retained for a short period for security and debugging purposes.

3. How we use your data

• To provide, operate, and improve WordCrafter.Pro
• To process subscription payments via Freemius
• To authenticate your session and keep your work secure
• To make AI requests to OpenRouter and Google Gemini on your behalf using the keys you provided
• To send transactional emails (account confirmation, password reset). We do not send marketing emails unless you explicitly opt in
• To understand aggregate usage patterns and improve the product
• To detect and prevent abuse, fraud, and security incidents

We do not sell your data. We do not use your writing content to train AI models.

4. Third-party services

Running WordCrafter.Pro requires several third-party services. Each has its own privacy policy:

• Supabase (database and authentication) — supabase.com/privacy
• Freemius (payment processing and Merchant of Record) — freemius.com/privacy-policy
• Vercel (hosting and edge network) — vercel.com/legal/privacy-policy
• OpenRouter (AI text generation) — requests are sent to OpenRouter using your own API key. OpenRouter's data handling applies to those requests
• Google Gemini (AI image generation and text) — requests are sent to Google using your own API key. Google's data handling applies
• OpenAI (AI text generation, optional) — if you provide an OpenAI key, requests are sent directly to OpenAI using your key. OpenAI's data handling applies
• PostHog (product analytics) — posthog.com/privacy

We share data with these services only to the extent necessary to provide WordCrafter.Pro. We do not share your data with any other third parties.

5. Data retention

We retain your account data, writing content, and conversation history for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where we are required by law to retain it (e.g. financial records for billing transactions).

You can download all your data at any time using the Download backup (ZIP) option in the Export menu.

6. Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data ("right to be forgotten")
• Export your data in a portable format (use the backup download)
• Object to or restrict certain processing

To exercise any of these rights, email support@wordcrafter.pro. We will respond within 30 days.

7. Cookies and tracking

We use session cookies set by Supabase to keep you logged in. These are strictly necessary for the app to function and cannot be disabled without logging out.

PostHog sets analytics cookies. You can disable these by enabling "Do Not Track" in your browser or by blocking cookies from PostHog's domain.

We do not use advertising cookies or third-party tracking pixels.

8. Security

We take reasonable measures to protect your data: HTTPS everywhere, encrypted API key storage, row-level security on the database so only you can read your own documents, and regular security reviews. No system is perfectly secure — if you discover a vulnerability, please email support@wordcrafter.pro.

9. Children

WordCrafter.Pro is not directed at children under 13. We do not knowingly collect personal data from anyone under 13. If you believe we have done so, contact us and we will delete it promptly.

10. Changes to this policy

We may update this policy from time to time. If we make material changes we will notify you by email or by a notice in the app. Continued use of WordCrafter.Pro after the effective date means you accept the updated policy.

11. Contact

DragonWorks Publishing
Email: support@wordcrafter.pro