PLOT-ON · LEGAL

Privacy Policy.

LAST UPDATED · OCTOBER 17, 2026

This Privacy Policy explains how Plot-on, LLC, a California limited liability company ("Plot-on," "we," "us," or "our"), collects, uses, shares, and protects personal information when you use the Plot-on website, applications, and related services. We are committed to protecting your privacy and your creative work.

THE SHORT VERSION: We collect what we need to run Plot-on, we run no third-party trackers and set only the cookies that sign you in, we don't sell your personal information, your stories stay yours, and we don't use your creative content to train AI models without your consent.

SECTION 1Information We Collect

1.1 Information You Provide

  • Account information: your email address, password (stored in hashed form), and display name.
  • Content: the plots, scenes, characters, outlines, notes, and other material you create in the Service ("Your Content"), and the prompts or input you submit to AI Features.
  • Payment information: if you subscribe to a Paid Plan, our payment processor collects your payment card details and billing address. We do not store your card details; we receive limited information such as your subscription status and billing period.
  • Communications: messages you send to support@plot-on.com, info@plot-on.com, or through in-app channels.

1.2 Information Collected Automatically

We do not run product analytics, behavioral tracking, or session-recording tools, so we do not build a record of the pages you view or the actions you take inside the Service. What we collect automatically is limited to the following.

  • Server logs: our web servers and hosting platform record standard request information — IP address, the browser and operating system your browser reports, the address requested, and a timestamp — which we use to operate, secure, and debug the Service. These logs are kept for a limited period and are not assembled into profiles of individual users.
  • Cookies: we set only essential cookies, used to sign you in and keep your session secure. See Section 6.

1.3 Information from Third Parties

If we offer sign-in through a third-party identity provider and you use it, we receive basic profile information (such as your name and email) from that provider as permitted by your settings with them.

SECTION 2How We Use Information

We use personal information to:

  • Provide, maintain, and secure the Service, including authenticating you and syncing Your Content;
  • Process subscriptions, payments, and billing;
  • Operate AI Features, including sending your input and relevant portions of Your Content to AI service providers to generate output for you;
  • Diagnose errors, monitor reliability, and improve features, performance, and design — working from server logs and from feedback you send us, not from behavioral tracking;
  • Communicate with you about the Service, including transactional emails, support responses, and, with your consent where required, product news (you can opt out of marketing at any time);
  • Detect, prevent, and respond to fraud, abuse, and security incidents;
  • Comply with legal obligations and enforce our Terms of Service.

We do not use Your Content to train AI models without your consent, and we do not sell your personal information.

SECTION 3Legal Bases for Processing (EEA/UK Users)

If you are in the European Economic Area or the United Kingdom, we process your personal information on the following legal bases: performance of a contract (providing the Service you signed up for, including AI Features you invoke); legitimate interests (securing and improving the Service, preventing abuse, and communicating with you about your account), balanced against your rights; consent (where required, e.g., for marketing emails), which you may withdraw at any time; and legal obligation (e.g., tax and accounting requirements).

SECTION 4How We Share Information

We share personal information only in the following circumstances:

  • Service providers: companies that process data on our behalf under contract, such as cloud hosting, payment processing, email delivery, and AI service providers. They may use your information only to provide services to us.
  • AI providers: your input to AI Features and relevant portions of Your Content are processed by third-party AI providers under confidentiality and data-protection obligations, solely to generate output for you.
  • Business transfers: if we are involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred as part of that transaction; we will notify you of any change in ownership or use of your personal information.
  • Legal requirements: when required by law, subpoena, or legal process, or when we believe disclosure is necessary to protect the rights, safety, or property of Plot-on, our users, or the public.
  • With your consent: we may share information with third parties when you direct us to or otherwise consent.

We may also share aggregated or de-identified information that cannot reasonably be used to identify you.

SECTION 5Your Content and Privacy

Your Content is private by default. Our personnel do not access Your Content except: (a) with your permission (e.g., to resolve a support issue you raise); (b) as needed to maintain, secure, or debug the Service, under access controls and confidentiality obligations; or (c) where required by law. Your stories are not shared with other users unless and until we offer sharing features and you choose to use them.

SECTION 6Cookies and Analytics

We set only essential cookies, and we run no third-party trackers. The Service sets two cookies, both strictly necessary to sign you in and keep your session secure: a short-lived session token and a refresh token. Both are first-party, cryptographically signed, and marked HttpOnly, so no script can read them. We set no analytics, advertising, or preference cookies — which means there are no non-essential cookies to consent to, and no cookie banner to click. Most browsers also let you block or delete cookies, though blocking these will prevent sign-in from working.

Our pages load no third-party analytics, advertising pixels, tag managers, social media trackers, or session-recording tools, and we serve our fonts from our own servers rather than a third-party content delivery network. No advertising or analytics company receives information about your visit, because none of their code runs on our pages. We do not engage in cross-site behavioral advertising, and we have no third-party advertising cookies to disclose. Because we neither track you across sites nor share your information for advertising, browser "Do Not Track" and Global Privacy Control signals call for no change in our behavior; where such a signal constitutes a legally recognized opt-out, we honor it.

If we add analytics later, we will update this Policy before doing so, and we will prefer approaches that keep your data with us — self-hosted or server-side measurement — over third-party tracking scripts. Where consent is required by law, we will obtain it first.

SECTION 7Data Retention

We retain personal information for as long as your account is active or as needed to provide the Service. If you delete Your Content or your account, we delete or de-identify the associated data within a reasonable period, except that copies may persist in routine encrypted backups for a limited time and we may retain certain records (e.g., billing and tax records, or information needed for legal claims) as required or permitted by law. AI inputs and outputs are retained only as needed to provide the feature and as described in this Policy.

SECTION 8Security

We use reasonable technical and organizational safeguards designed to protect personal information, including encryption in transit, hashed passwords, and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we learn of a security breach affecting your personal information, we will notify you as required by applicable law.

SECTION 9International Data Transfers

Plot-on is based in the United States and your information is hosted and processed in the United States, where privacy laws may differ from those in your jurisdiction. If you use the Service from the EEA, UK, or Switzerland, we rely on appropriate safeguards for international transfers, such as the European Commission's Standard Contractual Clauses (and the UK equivalent), with our service providers.

SECTION 10Your Rights and Choices

10.1 All Users

You can access and update your account information in settings, export Your Content using available export features, delete individual content or your entire account, and opt out of marketing emails via the unsubscribe link in any marketing message.

10.2 California Residents (CCPA/CPRA)

California law gives you the right to know what personal information we collect, use, and disclose; to access and receive a copy of it; to correct inaccurate information; to delete it (subject to exceptions); and to not be discriminated against for exercising these rights. We do not sell personal information and do not share it for cross-context behavioral advertising, and we have not done so in the preceding 12 months. We do not use or disclose sensitive personal information for purposes requiring a right to limit. To exercise your rights, email legal@plot-on.com; we will verify your request using your account email. You may use an authorized agent as permitted by law.

10.3 EEA/UK Residents (GDPR)

You have the right to access, rectify, and erase your personal information; to restrict or object to processing; to data portability; to withdraw consent at any time (without affecting prior processing); and to lodge a complaint with your local supervisory authority. To exercise these rights, email legal@plot-on.com.

10.4 Responding to Requests

We respond to rights requests within the timeframes required by applicable law (generally 30–45 days). We may ask for information to verify your identity before acting on a request.

SECTION 11Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Users aged 13–17 may use the Service only with parental or guardian consent as described in our Terms of Service. If you believe a child under 13 has provided us personal information, contact legal@plot-on.com and we will delete it.

SECTION 12Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or in-app notice before the changes take effect and update the "Last Updated" date above. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

SECTION 13Contact Us

Plot-on, LLC — California, USA

If you are in the EEA or UK and believe we have not resolved your concern, you may contact your local data protection authority.