This Privacy Policy describes what information Protaag collects, how it is used, and the choices you have. By using Protaag, you agree to the collection and use of information as described here.
| Category | Examples |
|---|---|
| Account information | Email address, password (stored as a salted hash, never in plain text), display name |
| Age verification | Date of birth entered at signup, the computed age and pass/fail result, and the IP address the check was made from — retained as a compliance record |
| Profile information | About/bio text, favorite quote, gender, genre preferences, region, chosen avatar/banner (all optional, entered by you) |
| Usage data | Stories read, chat messages sent within stories, reading time, likes/favorites, in-app currency ("Bookmark") balance and history |
| Payment data | Handled entirely by our payment processor, Stripe — we do not store full card numbers. We retain the resulting subscription status, purchase history, and a Stripe-assigned customer ID |
| Technical data | IP address and standard server logs generated by normal web traffic |
We and our analytics provider, Google Analytics, use cookies and similar tracking technologies (such as pixels) to understand how visitors use the Service — for example, which pages are viewed, how long a session lasts, and general location inferred from your IP address. We use this information to maintain and improve the Service.
We also use, or may use, advertising and remarketing technologies — such as conversion tracking pixels and cookies from ad networks like Google Ads and Meta (Facebook/Instagram) — to measure the performance of our advertising campaigns and to show ads to people who have previously visited the Service. These technologies may share limited information about your visit (such as pages viewed or actions taken) with the ad network, and may be used to build an advertising profile associated with your browser or device. Some state privacy laws treat this as "sharing" of personal information for cross-context behavioral advertising — see Section 9 (Your Privacy Rights by Region) for how to opt out.
Most browsers let you block or delete cookies through your browser settings; if you do, some parts of the Service may not function properly, and ads shown to you may be less relevant. You can also install the Google Analytics Opt-Out Browser Add-on to prevent your data from being used by Google Analytics, and use Google's Ads Settings or the Digital Advertising Alliance's opt-out tool to limit interest-based advertising generally. We do not currently respond to browser "Do Not Track" signals, as there is no common industry standard for how to interpret them.
We do not sell your personal information. We may share information in the following circumstances:
We collect and store the text of the prompts you enter and the responses generated by the AI to maintain your chat history and improve our system performance. Because these chat logs may be reviewed for safety moderation or used to train and refine our automated models, you are strictly prohibited from typing real-world personal information, financial data, passwords, or sensitive personal details into the chat window.
We retain account data for as long as your account is active. Age-verification log entries (including failed/under-18 attempts) are retained as a compliance record even if no account was created. Deleting your account via Settings immediately deactivates it — your subscription is cancelled, your session access is revoked, and your email or linked social login is archived and freed up for future use. It does not erase your underlying account records or chat history from our systems; we retain this data as described in this policy. If you have published a Manuscript through our story generation tool, that Manuscript remains on the Service under the license described in Section 6 of our Terms of Service even after you delete your account. See Age Restriction Policy below for the one exception to this.
Protaag is operated from the United States, and our hosting and service providers may process and store your information in the United States and other countries in which they operate. By using the Service, you consent to this transfer and processing, even if the country where the data is processed has data protection laws that differ from those in your country.
European Economic Area, UK, and Switzerland (GDPR/UK GDPR). If you are located in the EEA, UK, or Switzerland, you have the right to: access the personal data we hold about you; request correction of inaccurate data; request erasure of your data; restrict or object to certain processing; receive a copy of your data in a portable format; and withdraw consent at any time where processing is based on consent. Our legal bases for processing your data include performance of our contract with you (providing the Service), your consent (e.g., optional profile fields, marketing), our legitimate interests (e.g., fraud prevention, service improvement), and compliance with legal obligations. You also have the right to lodge a complaint with your local data protection supervisory authority. To exercise any of these rights, contact us using the information in Section 14 (Contact).
California and Nevada (CCPA/CPRA). If you are a California or Nevada resident, you have the right to: know what personal information we collect, use, and disclose; request deletion of your personal information; correct inaccurate personal information; opt out of the "sale" or "sharing" of your personal information (including cross-context behavioral advertising, described in Section 2 above); and not be discriminated against for exercising these rights. We do not sell personal information for money. To opt out of sharing for advertising purposes, or to exercise any other right under this section, contact us using the information in Section 14 (Contact), or use your browser or device's Global Privacy Control signal where supported — we honor it as an opt-out request.
These regional protections apply according to your location; all users, regardless of region, retain the rights described in Section 8 (Your Choices) above.
Our services are strictly directed to individuals who are 18 years of age or older, and we verify date of birth at signup to enforce this. If we discover that an account was created by someone who was under 18 at signup, and that person is still under 18 at the time we become aware of it, we will immediately terminate the account and delete all associated data, since the account was created in violation of these Terms. If the person has since turned 18 by the time we become aware of the issue, the account is treated as any other adult account under this policy — having reached the age of majority, they are bound by the agreement made at signup, and this deletion right does not apply retroactively.
We use industry-standard measures (including password hashing and encrypted connections) to protect your information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
The Service may contain links to third-party websites or services we do not control, such as our payment processor or social login providers. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing them with information.
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.
Questions about this Privacy Policy, or requests to access or delete your data, can be sent to [email protected].