Legal
Privacy Policy
Last updated: July 2026
The short version
We don't train AI on your content. We don't sell your data. You can delete everything at any time. We honor your GDPR rights and follow the EU AI Act's transparency rules.
What we collect
- Account info: email address, display name, avatar
- Content: stories, chapters, and interactions you create
- Preferences: your explicit settings and AI-learned preferences
- Usage data: interaction counts and reading history
- Payment info:processed by Stripe — we never see your card number
How we use it
- To provide and improve the Platform
- To personalize your AI writing experience via the preference engine
- To process payments and manage subscriptions
- To moderate content and enforce community guidelines
- To send you notifications you've opted into
What we never do
- Use your stories or content to train AI models
- Sell, share, or monetize your personal data
- Read your private stories (only you can access them)
- Store your payment card information
Data storage & security
All content is encrypted at rest in AWS DynamoDB. Data is stored in the US (us-east-1). We use industry-standard security practices including encrypted connections (TLS), secure authentication (AWS Cognito), and role-based access controls.
Your rights
You have the right to:
- Access all data we hold about you
- Export your stories, chapters, preferences, and account data — in-app export is included on Writer plans, and every account (including free) can request a full copy of their data at any time via privacy@fictionmaker.com
- Delete your account and personal data — email privacy@fictionmaker.com and we'll erase your account, stories, and personal data within 30 days
- Correct any inaccurate information
- Withdraw consent for data processing
Anonymous publishing
You may publish stories under a pen name. No real identity is required. We do not link pen names to real identities in any public-facing way.
Service providers (processors)
We share data only with the providers needed to run the service: Amazon Web Services (hosting, storage, and email delivery; US region us-east-1), Stripe (payment processing — we never see your full card details), and xAI (AI text and image generation — your prompts and story context are sent to generate responses; per our agreement they are not used to train models). We do not sell data to anyone.
Legal bases & retention
We process your data to provide the service you signed up for (performance of contract), to keep the platform safe and prevent abuse (legitimate interest), and to send optional emails you can switch off at any time (consent). Your account and content are retained until you delete them; deletion requests are completed within 30 days. Short-lived operational logs used for security and debugging expire automatically.
International transfers
FictionMaker is operated from the United States and data is stored in the US (us-east-1). If you use the service from the EU/EEA or UK, your data is transferred to and processed in the US; the rights described above apply regardless of where you live.
EU AI Act compliance
FictionMaker follows the EU AI Act (in force since August 2024; the Article 50 transparency obligations for AI-generated content apply from 2 August 2026). AI-generated audio and images on FictionMaker carry machine-readable AI-provenance markings, AI-assisted passages are tracked as AI-generated within the writing studio, and AI characters are always disclosed as AI in chat.
Contact
Privacy concerns? Contact our privacy team at privacy@fictionmaker.com.