• Legal

AI-powered book writing for authors who dream bigger.

© Copyright 2026 Authorythm. All Rights Reserved.

Legal
  • Legal
  • Terms of Service
  • Privacy Policy
  • Cookie Policy
About
  • authorythm.ai
  • Status

Privacy Policy

Version 2.2 — Effective October 28, 2026

1. Who we are

Authorythm, LLC, a Delaware limited liability company, 1111b South Governors Avenue, Suite 1, Dover, DE 19904, USA ("Authorythm", "we"), operates the Authorythm platform (the "Service"). We are the controller of the personal data described here. Contact: legal@authorythm.ai.

2. What we collect

Account data. Name, email address, sign-in credentials (passwords are hashed and never visible to us), profile picture if you add one, language and theme preferences.

Billing data. Plan, purchases, invoices, word and token balances, and transaction history. Card details are collected and stored by Stripe; we see only the last four digits, card brand and expiry.

Your creative content. Story ideas, settings, characters, plots, outlines, instructions you give the AI, and the manuscript text generated for you ("Your Input" and "Output"). We treat this as your confidential information.

Usage and technical data. Pages and features used, generation runs and their outcomes, word counts, model and token usage per call (for billing and cost reporting), IP address, browser and device information, and error reports.

Support data. Messages you send through the support drawer, contact form or email, and the ticket history.

Community data (optional). If you join our Discord community, your Discord account identifier so we can grant roles.

We do not collect special-category data on purpose. Fiction you write may contain sensitive themes; we process it only as content, not as facts about you.

3. How and why we use it

PurposeDataLegal basis (EU/UK)
Provide the Service, including sending Your Input to AI model providers and returning OutputAccount, creative content, usageContract
Billing, balances, invoices, fraud preventionAccount, billing, usageContract; legal obligation
Support and communication about your account, security, terms and billingAccount, supportContract; legitimate interests
Product updates and release notes by email (you can opt out)AccountLegitimate interests; consent where required
Keep the Service secure, debug faults, prevent abuseUsage, technicalLegitimate interests
Measure and improve the Service using aggregated, anonymized dataUsageLegitimate interests
Comply with law and enforce our TermsAnyLegal obligation; legitimate interests
We do not sell personal data. We do not use your manuscripts, inputs or outputs to train AI models, and our model providers are contractually prohibited from doing so.

4. Who processes data for us (subprocessors)

ProviderPurposeDataLocation
AnthropicAI text generationYour Input, Output, instructionsUSA
Google (Gemini API)AI text generationYour Input, Output, instructionsUSA
xAIAI text generationYour Input, Output, instructionsUSA
Amazon Web Services (Bedrock)AI text generationYour Input, Output, instructionsUSA
Cloud database, authentication and file storage providerStoring account and content data, signing you inAll account and content dataUSA
Application hosting and content delivery providerRunning the Service and delivering it to your browserTechnical, usage, all data in transitUSA and edge locations
StripePayments, invoices, taxBilling dataUSA
Error and performance monitoring providerDetecting and diagnosing faultsTechnical data, error contextUSA
Email delivery providerTransactional and support emailEmail address, message contentUSA/EU
Bot protection providerTelling people from bots on sign-up and formsTechnical dataGlobal
DiscordOptional communityDiscord identifierUSA

AI providers receive only the text needed for the specific generation you requested; they retain it only as their API terms allow for abuse monitoring, typically 30 days or less, and do not train on it. We name our AI providers so you can check that promise against their terms. We describe our other providers by role; we will tell you which company fills a role on request at legal@authorythm.ai. We will update this list when providers change; material changes are announced under section 10.

Until the legacy marketing site's hosting is fully retired, its hosting provider processes visitor technical data.

5. International transfers

We are based in the United States and process data there. If you are in the EU, UK or Switzerland, transfers to us and to our subprocessors rely on the EU–US Data Privacy Framework where the provider is certified, and otherwise on Standard Contractual Clauses.

6. How long we keep data

  • Account and creative content: while your account is open. When you delete your account, we close it: you can no longer sign in, and your projects and manuscripts are archived. We keep them, and the records below.
  • Backups: deleted data may remain in encrypted backups for up to 30 days.
  • Billing records: 10 years from each record's date, to meet tax and accounting obligations and to establish or defend legal claims.
  • Records of your acceptance of our Terms: 10 years from each acceptance.
  • Records of AI generation runs, including what was sent to the AI and what it returned: 10 years from each run.
  • Records of decisions about your account's billing or access: 10 years.
  • Support tickets: 10 years from each ticket.
  • Waitlist entries: 10 years from when you joined.
  • Usage and error logs: up to 90 days. The sign-in log and the log of our support tools are kept longer for now; we will set their end and update this policy.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, export or restrict the use of your personal data, to object to processing based on legitimate interests, and to withdraw consent. You can export your manuscripts (DOCX, PDF) and delete your account from account settings. For anything else, email legal@authorythm.ai; we respond within 30 days. You may also complain to your local data protection authority.

California residents: we do not sell or share personal information for cross-context behavioral advertising. You may exercise the rights above without discrimination.

8. Children

The Service is for adults. We do not knowingly collect data from anyone under 18. If you believe a minor has an account, contact us and we will delete it.

9. Security

We use encryption in transit and at rest, access controls that keep each account's data separate, least-privilege access for staff, and logging of administrative access to customer projects. No system is perfectly secure; tell us at legal@authorythm.ai if you find a problem.

10. Changes to this policy

We will post changes here with a new version number and effective date and, for material changes, notify you by email or in the app at least 30 days in advance.

11. Contact

Authorythm, LLC, 1111b South Governors Avenue, Suite 1, Dover, DE 19904, USA, legal@authorythm.ai.