Privacy Policy
Last updated: February 22, 2026
TL;DR: We collect only what's necessary to run the service. We never sell your data. We may send you occasional emails if you opt in. You can delete your account and data at any time.
1. Who We Are
Auctore ("we", "us", "our") is a writing studio application operated by Myriad Traders, LLC. This policy describes how we collect, use, and protect your personal information when you use our website at auctore.app and our application.
2. Information We Collect
Information you provide:
- Account information: Name, email address, and password when you create an account (or profile data from Google/Apple if you use social sign-in)
- Content: Stories, notes, characters, outlines, and other writing content you create within the app
- Waitlist/contact: Email address if you join our waitlist
- Preferences: Language, theme, and app settings
Information collected automatically:
- Usage data: Pages visited, features used, session duration (anonymous analytics)
- Device info: Browser type, operating system, screen resolution
- Cookies: Session cookies to keep you logged in, preference cookies for language/theme
3. How We Use Your Information
| Purpose | Legal Basis (GDPR) |
|---|
| Provide and improve the service | Contract performance |
| Authenticate your account | Contract performance |
| Send product updates and tips | Legitimate interest (opt-out available) |
| Send promotional emails from us or our partners | Consent (opt-in only) |
| Analyze usage to improve features | Legitimate interest |
| Comply with legal obligations | Legal obligation |
4. We Never Sell Your Data
We do not sell, rent, or trade your personal information to third parties. Period. Your writing content is yours — we will never use it to train AI models or share it with anyone without your explicit permission.
5. Marketing Communications
We may send you:
- Product updates: New features, tips, and service announcements (you can opt out at any time)
- Promotional emails: Occasional offers from us or carefully selected partners — only if you explicitly opt in. We never share your email with partners; we send on their behalf.
Every marketing email includes a one-click unsubscribe link. You can also manage your email preferences in your account settings.
6. Information Sharing
We only share your data with:
- Infrastructure providers: Hosting (Railway), CDN (Cloudflare) — to deliver the service
- Authentication providers: Google, Apple — only if you choose social sign-in (they receive only what's needed to authenticate)
- Legal requirements: If required by law, regulation, or valid legal process
7. Your Rights
Regardless of where you live, you can:
- Access: Request a copy of all data we hold about you
- Correct: Update or fix inaccurate information
- Delete: Delete your account and all associated data
- Export: Download your writing content at any time
- Opt out: Unsubscribe from marketing emails
Additional rights for EU/EEA/UK residents (GDPR):
- Restrict processing: Limit how we use your data
- Data portability: Receive your data in a machine-readable format
- Object: Object to processing based on legitimate interest
- Withdraw consent: Withdraw marketing consent at any time
- Complain: Lodge a complaint with your local data protection authority
Additional rights for California residents (CCPA):
- Right to know: What personal information we collect and why
- Right to delete: Request deletion of your data
- Right to opt out of sale: We don't sell data, but you have this right
- Non-discrimination: We won't treat you differently for exercising your rights
Additional rights for Brazilian residents (LGPD):
- Confirmation: Confirm whether we process your data
- Anonymization: Request anonymization of unnecessary data
- Information: Know which entities we share data with
- Revoke consent: Revoke consent at any time
8. Cookies
We use only essential cookies:
- Session cookie: Keeps you logged in (expires when you log out or after 30 days)
- Preference cookie: Remembers your language and theme choice
We do not use tracking cookies, advertising cookies, or third-party analytics cookies.
9. Data Security
We protect your data with:
- HTTPS encryption for all data in transit
- Password hashing (bcrypt) — we never store plaintext passwords
- Minimal access controls — only essential personnel can access infrastructure
- Regular backups with encryption
10. Data Retention
- Account data: Retained while your account is active. Deleted within 30 days of account deletion.
- Writing content: Retained while your account is active. Permanently deleted with your account.
- Waitlist data: Retained until the product launches, then deleted or migrated to account (with consent).
- Analytics: Aggregated, anonymous data may be retained indefinitely.
11. Children's Privacy
Auctore is not directed at children under 13 (or 16 in the EU). We do not knowingly collect data from children. If you believe a child has created an account, please contact us and we will delete it promptly.
12. International Data Transfers
Our servers are located in the United States. If you access Auctore from outside the US, your data will be transferred to and processed in the US. We ensure appropriate safeguards are in place as required by applicable law.
13. Changes to This Policy
We may update this policy from time to time. We'll notify you of significant changes via email or in-app notification. The "last updated" date at the top will always reflect the current version.
14. Contact Us
For privacy questions, data requests, or concerns:
- Email: [email protected]
- Company: Myriad Traders, LLC
- Response time: We respond to all privacy requests within 30 days