Privacy Policy

1. Information We Collect

To provide PlotMagician accounts, creation workflows, subscriptions, and support, we process the following information:

• Account information: email address, display name, login state, and security verification information.
• Creation content: project settings, materials, AI-generated results, edit history, and export records.
• Payment and subscription information: plan, credits, order status, transaction identifiers returned by payment providers, and subscription state.
• Support communications: issues, screenshots, and contact details you submit by email or in-product support channels.
• Technical data: IP address, browser, device, access time, error logs, and security audit records.

2. How We Use Information

• Create and maintain accounts, workspaces, projects, and member permissions.
• Provide AI text generation, quality review, material recall, exports, and task status synchronization.
• Process subscriptions, credit grants, credit usage, refunds, and billing issues.
• Investigate errors, prevent abuse, and protect account and platform security.
• Respond to support requests and send necessary service notices.

3. Third-Party Services

We send relevant data to third-party service providers only where necessary to provide the service. Supabase is used for authentication, databases, storage, and server-side data access; Creem is used for subscription payments, orders, refunds, tax, and payment compliance; MiniMax, DeepSeek, and other AI providers are used for text generation, content quality review, and structured output; Cloudflare and similar infrastructure providers are used for DNS, email routing, network security, and availability.

When you upload materials or start generation, related project content may be sent to AI providers for processing. We do not proactively publish your private creation content and do not store full card details.

4. Storage and Retention

• Account and project data is retained while you use the service, until you delete your account or request deletion.
• AI task diagnostic logs are used only for internal troubleshooting and are cleaned according to system policy.
• Payment, subscription, and refund records may be retained longer as required by law, tax rules, and payment compliance.
• After account deletion, we delete or anonymize personal data that is no longer needed within a reasonable period.

5. Security Measures

We protect data through HTTPS, access controls, row-level permissions, server key isolation, audit logs, and least-necessary access. No network service can guarantee absolute security, so you must also protect login credentials and avoid uploading unauthorized or highly sensitive content into projects.

6. Cookies and Local Storage

We use cookies and browser local storage to maintain login state, remember preferences, and protect account security. You can restrict cookies through browser settings, but some login and workspace features may not work normally.

7. Your Rights

• Access, correct, or delete your account profile.
• Export or delete project content you created.
• Withdraw non-essential marketing notices.
• Contact us about privacy, data deletion, or security questions.