Privacy Policy

Last updated: March 2026

---

1. Introduction

WordSpark ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our creative writing platform.

2. Information We Collect

Information You Provide

• Account information: Email address, name, and password when you create an account.
• Content: Manuscripts, Story Bible data, and other creative content you create within WordSpark.
• Payment information: Processed securely through Stripe, our third-party payment provider. We do not store credit card numbers.

Information Collected Automatically

• Usage data: Features used and interaction patterns to improve the product. This data is behavioral only and does not include your creative content.
• Device information: Browser type, operating system, and device identifiers.

3. How We Use Your Information

• To provide and maintain the WordSpark platform
• To process your subscription and payments
• To improve our product and user experience
• To communicate with you about your account and updates

4. Your Creative Content

Your writing is yours. WordSpark does not claim any ownership rights to your manuscripts, Story Bible data, or any other content you create using the platform.

We do not use your creative content to train AI models, and we require that our third-party AI providers do not use your content for training purposes (see Section 5 below).

Your Story Bible data, character information, and all extracted entities are derived solely from your own writing and remain private to your account.

5. AI Processing and Third-Party Providers

WordSpark uses AI features to power Story Bible extraction, AI Chat, contradiction detection, and related capabilities. To provide these features, excerpts of your manuscript text are sent to third-party AI service providers for processing. Your content is never sent in full — it is chunked into small segments before processing.

AI Service Providers

We may use the following categories of third-party providers to process your content:

• AI language model providers (such as Google Vertex AI, OpenAI, and Anthropic) to power text analysis, chat, and extraction features
• AI embedding services to generate numerical representations of entity metadata for search and similarity features
• Graph database services to store extracted entity relationships and associated text excerpts from your manuscripts

How Your Content Is Protected

• No AI training: Our AI providers are contractually prohibited from using your content to train their models. We use enterprise and API-tier services that exclude customer data from model training.
• Minimal data sent: Only small excerpts of your manuscript (not full documents) are sent for processing. Content is chunked and truncated before any API call.
• Server-side only: All AI processing occurs on our servers. Your content is never sent directly from your browser to an AI provider.
• Quality and observability: AI interactions may be processed through observability and quality assurance tools operated by our sub-processors. These tools are bound by data processing agreements that prohibit use of your content for model training. Observability data is used solely for debugging, performance monitoring, and service improvement.

Chat History

When you use AI Chat, your conversation messages and AI responses are stored in your account to preserve your chat history. You can delete individual conversations at any time.

6. Other Third-Party Services

In addition to AI providers, we use the following services to operate WordSpark:

• Stripe for payment processing (receives payment data only, not creative content)
• Firebase/Google Cloud for authentication, data storage, and hosting (our core infrastructure provider)
• LangChain Inc. for AI quality assurance and observability (receives AI interaction data including prompts and responses for debugging and performance monitoring; bound by data processing agreements that prohibit training on your content)
• Sentry for error monitoring (captures error data and stack traces to help us fix bugs; does not capture your creative content)
• Tavily for AI-assisted web search (receives search queries generated by the AI agent, not your manuscript content directly)

7. Data Security

We implement industry-standard security measures including:

• Encryption in transit (TLS) and at rest
• Server-side API key management (no AI provider credentials are exposed to your browser)
• Access controls and authentication
• Secure cloud infrastructure

8. Data Retention and Export

• You can export your content at any time in standard formats (DOCX, EPUB), even without an active subscription
• Account data is retained while your account is active
• Upon account deletion, your data is permanently removed within 30 days
• AI chat histories are retained while your account is active and can be deleted individually

9. Your Rights

You have the right to:

• Access your personal data
• Export your content in standard formats
• Delete your account and associated data
• Delete individual AI chat conversations
• Opt out of non-essential communications

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification.

11. Contact Us

For privacy-related questions, contact us at support@wordspark.io.