Privacy Policy

NovelDraft is currently an owner-operated project in active development. The legal name, postal address, and data-protection contact for the operating entity will be published here before a public commercial launch. For now, privacy questions can be sent to support@noveldraft.com.

This notice describes the current development service as of the date above. Hosting locations, provider details, and retention periods depend on the final production setup and will be completed before commercial launch.

Depending on the features you use, NovelDraft handles:

• account details such as your name, email address, password hash, and email-verification status;
• story and chapter names, story settings, note titles, categories, note order, and related writing-desk metadata stored in the NovelDraft application database;
• numeric saved word counts, writing-activity timestamps, writing timezone and optional novel goals used for your Analysis page; these statistics do not contain manuscript text;
• session and device details used for sign-in and security, including IP address, browser or device information, and user-agent data;
• short-lived, hashed sign-in verification challenges when a login comes from a browser that is not trusted;
• Google Drive and Dropbox authorization tokens, stored in encrypted form, when you connect cloud storage;
• Starter manuscripts of up to 1000 words are stored in the NovelDraft application database. They are removed from active server storage after verified transfer to your selected cloud storage, or when you delete the novel or your account. Backups may retain older copies according to backup retention. Larger manuscripts are saved in your connected cloud storage;
• Note bodies are saved in the NovelDraft application database. Copies written by an earlier version may remain in category-organized JSON files in your connected cloud storage. Those copies are not updated when you edit notes in the current version;
• document content sent to the Service when you request a DOCX export. The generated export is written to account-specific application storage so it can be downloaded.

We use information to create and secure accounts, provide writing and note features, connect to your chosen cloud storage at your direction, prepare requested exports, send account and security messages, respond to support requests, maintain and protect the Service, and meet legal obligations.

We do not sell your personal information or use your stories and notes for advertising or to train general-purpose AI models. AI Assistance is off by default. When enabled, relevant project content is sent to the model you select. Your selected cloud provider’s data policies apply; we cannot promise its retention or training practices. Local Ollama uses your computer when you select an installed local model. No project content is sent to an AI model while AI Assistance is off.

AI requests run through local Ollama or your Personal ChatGPT bridge. NovelDraft does not store cloud AI API keys. Story memory, search vectors, saved conversations and Insights are stored in your connected cloud storage. Temporary AI request context and responses are encrypted in the application cache and expire after 20 minutes. Session conversations are held in your browser tab; saved conversation retention is controlled in AI Controls. Disconnected cloud archives cannot be pruned until access is restored. Requests already sent to a model cannot be recalled.

Depending on the applicable law and the particular use, processing may be needed to provide the Service you requested, to pursue legitimate security and operational interests, to meet legal duties, or to honor your choices and cloud storage authorization.

Google Drive uses Google’s per-file drive.file permission to create, read, update and remove files accessible to this app. Dropbox uses file metadata read and file content read/write permissions within NovelDraft’s App Folder. NovelDraft does not request access to the rest of your Dropbox.

NovelDraft uses cloud access to operate the writing integration; it does not sell cloud data or use it for advertising. You can disable a provider in Settings or revoke permission in the provider’s account settings. Disabling storage does not delete its saved encrypted authorization token or any files. Revoke access with the provider to end that authorization. Files are removed from cloud storage only when you explicitly request manuscript removal; account deletion leaves cloud files untouched.

• Google’s Drive API scope information
• Google’s privacy policy
• Dropbox’s privacy policy

We use service providers for application hosting, database and file storage, email delivery, and cloud storage integration. They receive only the information needed to provide their service to NovelDraft and are subject to their own terms and privacy practices. The production provider list and processing locations will be added when deployment is finalized.

We may disclose information where required by law, to protect users or the Service, or in connection with a business transfer. We do not make your stories public or share them with other NovelDraft users through the current Service.

The current app uses essential session and security cookies to keep you signed in and protect requests. We do not currently use advertising cookies. If analytics or other non-essential tracking is added, this notice and any required consent controls will be updated before that tracking begins.

We keep account and writing-desk database records while needed to operate your account. You can request account deletion in Profile. The account, related database records, and stored Google authorization token are removed from the active NovelDraft database, subject to legal obligations and backup-retention cycles.

Deleting a NovelDraft account does not delete manuscript files or archived note JSON files from your Google Drive or Dropbox. Remove those files directly in Drive if you want them deleted. DOCX exports are currently stored in account-specific application storage after generation; this development build does not yet automatically remove an export after download. Contact support to request removal of an export. We will finalize and publish a defined export and backup retention schedule before commercial launch.

We use measures intended to protect account and service data, including password hashing, encrypted storage for Google authorization tokens, and access controls. No internet service or storage method can be guaranteed completely secure. Keep your account credentials private and maintain your own copies of important writing.

You can update account details, change your password, disable Drive storage, and request account deletion through Profile. You can revoke NovelDraft’s Drive authorization in your Google Account settings. Depending on where you live and the law that applies, you may also have rights to access, correct, delete, restrict, object to, or receive a copy of personal information, and to complain to a data-protection authority. Contact support@noveldraft.com to make a request. We may need to verify your identity before responding.

If processing relies on consent, you can withdraw that consent. Withdrawal does not affect processing that took place before withdrawal, and some features may stop working.

Our hosting, email, and other providers may process data in countries different from yours. The countries and any transfer safeguards will be listed once the production providers are chosen and reviewed.

NovelDraft is actively changing during development. We may update this notice as features, providers, or legal requirements change. We will update the date above and provide additional notice for material changes where appropriate or legally required.