Version 2.2 — Effective October 28, 2026
Authorythm, LLC, a Delaware limited liability company, 1111b South Governors Avenue, Suite 1, Dover, DE 19904, USA ("Authorythm", "we"), operates the Authorythm platform (the "Service"). We are the controller of the personal data described here. Contact: legal@authorythm.ai.
Account data. Name, email address, sign-in credentials (passwords are hashed and never visible to us), profile picture if you add one, language and theme preferences.
Billing data. Plan, purchases, invoices, word and token balances, and transaction history. Card details are collected and stored by Stripe; we see only the last four digits, card brand and expiry.
Your creative content. Story ideas, settings, characters, plots, outlines, instructions you give the AI, and the manuscript text generated for you ("Your Input" and "Output"). We treat this as your confidential information.
Usage and technical data. Pages and features used, generation runs and their outcomes, word counts, model and token usage per call (for billing and cost reporting), IP address, browser and device information, and error reports.
Support data. Messages you send through the support drawer, contact form or email, and the ticket history.
Community data (optional). If you join our Discord community, your Discord account identifier so we can grant roles.
We do not collect special-category data on purpose. Fiction you write may contain sensitive themes; we process it only as content, not as facts about you.
| Purpose | Data | Legal basis (EU/UK) |
|---|---|---|
| Provide the Service, including sending Your Input to AI model providers and returning Output | Account, creative content, usage | Contract |
| Billing, balances, invoices, fraud prevention | Account, billing, usage | Contract; legal obligation |
| Support and communication about your account, security, terms and billing | Account, support | Contract; legitimate interests |
| Product updates and release notes by email (you can opt out) | Account | Legitimate interests; consent where required |
| Keep the Service secure, debug faults, prevent abuse | Usage, technical | Legitimate interests |
| Measure and improve the Service using aggregated, anonymized data | Usage | Legitimate interests |
| Comply with law and enforce our Terms | Any | Legal obligation; legitimate interests |
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Anthropic | AI text generation | Your Input, Output, instructions | USA |
| Google (Gemini API) | AI text generation | Your Input, Output, instructions | USA |
| xAI | AI text generation | Your Input, Output, instructions | USA |
| Amazon Web Services (Bedrock) | AI text generation | Your Input, Output, instructions | USA |
| Cloud database, authentication and file storage provider | Storing account and content data, signing you in | All account and content data | USA |
| Application hosting and content delivery provider | Running the Service and delivering it to your browser | Technical, usage, all data in transit | USA and edge locations |
| Stripe | Payments, invoices, tax | Billing data | USA |
| Error and performance monitoring provider | Detecting and diagnosing faults | Technical data, error context | USA |
| Email delivery provider | Transactional and support email | Email address, message content | USA/EU |
| Bot protection provider | Telling people from bots on sign-up and forms | Technical data | Global |
| Discord | Optional community | Discord identifier | USA |
AI providers receive only the text needed for the specific generation you requested; they retain it only as their API terms allow for abuse monitoring, typically 30 days or less, and do not train on it. We name our AI providers so you can check that promise against their terms. We describe our other providers by role; we will tell you which company fills a role on request at legal@authorythm.ai. We will update this list when providers change; material changes are announced under section 10.
Until the legacy marketing site's hosting is fully retired, its hosting provider processes visitor technical data.
We are based in the United States and process data there. If you are in the EU, UK or Switzerland, transfers to us and to our subprocessors rely on the EU–US Data Privacy Framework where the provider is certified, and otherwise on Standard Contractual Clauses.
Depending on where you live, you may have the right to access, correct, delete, export or restrict the use of your personal data, to object to processing based on legitimate interests, and to withdraw consent. You can export your manuscripts (DOCX, PDF) and delete your account from account settings. For anything else, email legal@authorythm.ai; we respond within 30 days. You may also complain to your local data protection authority.
California residents: we do not sell or share personal information for cross-context behavioral advertising. You may exercise the rights above without discrimination.
The Service is for adults. We do not knowingly collect data from anyone under 18. If you believe a minor has an account, contact us and we will delete it.
We use encryption in transit and at rest, access controls that keep each account's data separate, least-privilege access for staff, and logging of administrative access to customer projects. No system is perfectly secure; tell us at legal@authorythm.ai if you find a problem.
We will post changes here with a new version number and effective date and, for material changes, notify you by email or in the app at least 30 days in advance.
Authorythm, LLC, 1111b South Governors Avenue, Suite 1, Dover, DE 19904, USA, legal@authorythm.ai.