Privacy policy

Who we are

LoreClerk is a writing workbench for long-form fiction, run by Tao Tang, an individual who runs LoreClerk as a sole operator, the controller of the personal data described here.

Postal address: available on request — write to [email protected].

Privacy questions and requests: [email protected]. We have not appointed a data protection officer; that address reaches the operator directly.

What we collect

Account: your email, name, password (stored only as a hash), language, time zone, and, if you sign in with Google, your Google account id, name and verified email.

Your writing: books, chapters, outlines, story notes, notes and files you upload. We process them only to run the features you use.

Billing: your plan, credit balance and a record of each purchase. Card details go to our merchant of record, Waffo, and never reach our servers; we see the card brand and last four digits at most.

Usage and security: which AI tasks ran and how many credits they used, sign-in sessions (device and IP address), and server logs.

Waitlist and the free continuity check on this site: your email and optional answers; for the free check, the text you paste, kept for one hour.

Instructions you type for AI features (a premise, a chapter brief, a rewrite instruction) are checked for safety before generation; we keep the verdict, not the text, in our moderation log.

Why, and on what legal basis

To provide the service you signed up for, take payment and keep your account working: performance of our contract with you (GDPR Art. 6(1)(b)).

To keep the service secure, prevent abuse, enforce the Acceptable use policy and keep accounting records: our legitimate interests and legal obligations (Art. 6(1)(f) and (c)).

Waitlist emails and product news: your consent (Art. 6(1)(a)), which you can withdraw with the link in any email.

Language, theme and notice storage in your browser are strictly necessary for the site (ePrivacy Directive Art. 5(3)), so no consent is asked. We use no analytics, advertising or tracking tools.

Who processes it for us

We don’t sell personal data. These providers process it on our behalf, under their data processing terms:

Tencent Cloud: hosts our servers and database (United States, Virginia).

Cloudflare: DNS, content delivery, bot protection (Turnstile) on sign-up and the free check, and routing of mail sent to our addresses.

Resend: sends account and notification emails.

OpenRouter (United States): every AI request goes through it. We have zero data retention turned on, so it only sends requests to model hosts that don’t store prompts or replies and so can’t train on them. Claude Haiku (made by Anthropic) runs on Google Cloud Vertex AI or Amazon Bedrock; DeepSeek V4.1 Flash (made by DeepSeek) runs on independent hosts that OpenRouter picks from its zero-retention list. Neither Anthropic nor DeepSeek receives your text directly. See Models we use.

Waffo: our merchant of record. It runs checkout, charges your card, handles tax, receipts and refunds, and keeps your payment details under its own privacy policy.

Google: only if you choose “Sign in with Google”.

Text goes to an AI provider only when a feature you use needs it, and only the parts that task needs. If you connect your own AI key, those tasks go to your provider under your account and its terms.

International transfers

Our servers are in the United States, and most providers above process data there. Where data from the EU/EEA, UK or Switzerland goes to a country without an adequacy decision, the transfer relies on the European Commission’s Standard Contractual Clauses (and the UK addendum) in each provider’s data processing agreement, or on the provider’s certification under the EU-US Data Privacy Framework.

How long we keep it

Account and writing: while your account is open. After you delete your account you have 30 days to change your mind; then books, notes and story notes are deleted for good.

Books you delete: 30 days in Trash, then deleted for good.

Backups: encrypted copies, 7 daily, 4 weekly and 6 monthly. Deleted data can remain in a backup for up to about six months.

Server and application logs: 14 days.

Free continuity check: pasted text and results one hour; the record of the check 48 hours.

Waitlist: unconfirmed sign-ups 30 days; confirmed ones until you unsubscribe or your account opens.

Billing and credit records: as long as tax and accounting law requires (typically up to 10 years), no longer linked to your profile after account deletion. Payment notifications we receive from Waffo: about 13 months.

Moderation log: verdicts on AI instructions (no instruction text), 12 months.

Your rights

You can access, correct, export, or delete your data, restrict or object to how we use it, and withdraw consent at any time. Export and deletion are self-service in Account settings; for anything else write to [email protected]. We answer within one month.

If you’re in the EU/EEA or UK you can complain to the data protection authority where you live or work. California residents have the rights in the CCPA/CPRA; we don’t sell or share personal information for advertising.

Security

Traffic is encrypted (HTTPS). Passwords are hashed. Backups are encrypted before they leave the server and the backup key isn’t kept on it. Staff access to manuscripts is limited to what support you ask for needs.

Children

LoreClerk is for people 16 and older. We don’t knowingly collect data from anyone younger; if we learn we have, we delete it.

Changes

When this policy changes in a way that matters, we update the version and date above and tell account holders by email before the change applies.