Privacy Policy

Effective date: 11 July 2026 · Applies to http://ideaengine.work.gd/ghostwriter ("the Service")

Our commitment in one sentence: your writing and your personal information are yours. We do not sell them, we do not share them with third parties for their own purposes, and we will only ever disclose them if compelled by a verified and legally binding government warrant, court order, or equivalent legal obligation.

1. Who we are

The A.I. Ghostwriter Chapter Builder ("we", "us", "our") is an online writing studio operated from South Australia, Australia. This policy explains what information we collect when you use the Service, why we collect it, how we protect it, and the strict conditions under which it could ever be disclosed. By creating an account or using the Service you agree to this policy.

2. Information we collect

We collect only what is necessary to operate the Service:

Account information. When you sign in with Google we receive your name, email address, profile picture and a unique account identifier from Google. We never see or store your Google password.
Your content. The projects, chapters, story bibles, and conversations you create are stored in our database so the Service can save your work and provide it back to you.
Usage and billing records. We record technical usage data — such as which features you use, the number of AI tokens your requests consume, associated costs, timestamps, and credit balances — so we can meter usage fairly, prevent abuse, and operate the free-allowance and top-up system.
Payment confirmations. Top-up payments are processed entirely by PayPal. We never see, collect, or store your card numbers or bank details. We store only the PayPal order reference, the amount, and its completion status.

We do not collect advertising identifiers, we do not run third-party advertising or tracking scripts, and we do not buy data about you from anyone.

3. How we use your information

To operate the Service: saving your projects, generating AI text you request, metering your usage, and maintaining your credit balance.
To process AI requests: the text needed to fulfil your request (your prompt, relevant project content, and conversation context) is transmitted to Google's Gemini API solely to generate your requested output. It is used for that purpose only.
To keep the Service safe: detecting abuse, fraud, or attempts to circumvent usage limits.
To improve the Service: we may view usage records and, where necessary, the content of interactions with the Service, strictly for the purposes of diagnosing faults, improving features, and making the Service work better for writers. Such review is limited to what is necessary, performed by authorised personnel only, and never used for marketing, profiling, or disclosure to any third party.
To administer promotional programs you choose to enter (such as the humanitarian writer bonus, which involves an automated AI review of writing you have created on the Service).

4. When we disclose information — and when we never will

We do not sell, rent, trade, or share your personal information or your writing with third parties for their own purposes. Ever.

The only circumstances in which we will disclose information are:

Verified legal compulsion. If we receive a government warrant, subpoena, court order, or equivalent legally binding demand, we will first take reasonable steps to verify its authenticity, scope and legal validity. We will disclose only the specific information the instrument lawfully compels, and nothing more. Where the law permits, we will notify you of the demand before complying.
Service processors acting on our instructions. Limited data is handled by the infrastructure we rely on to run the Service: our hosting provider (storage of the database and application), Google (sign-in authentication and Gemini AI processing), and PayPal (payment processing). Each processes data only to provide their function to us and is bound by their own published privacy and security commitments.

No other disclosure occurs. We do not respond to informal requests for user data from any person, company, or agency.

5. Security

All traffic between your browser and the Service is encrypted with TLS (HTTPS).
Your account is protected by Google Sign-In; we hold no passwords that could be stolen.
Your projects are private to your account and are never visible to other users.
API keys and payment credentials are held server-side only and are never exposed to browsers.
Access to stored data is restricted to authorised personnel with a genuine operational need.

6. Data retention and deletion

Your projects and chapters are retained while your account is active so your work is always there when you return. You can delete any project or chapter yourself at any time, permanently.
You may request deletion of your entire account and all associated content by contacting us (section 10). We will complete verified deletion requests within 30 days, except for minimal billing records we are legally required to retain.
Usage and payment records are retained as required for accounting and legal compliance, then deleted.

7. Your rights

Regardless of where you live, we extend the same rights to every user:

Access — ask us what personal information we hold about you.
Export — your writing can be exported from the app at any time, and we will provide a copy of your data on request.
Correction — ask us to correct inaccurate information.
Deletion — delete your content yourself, or ask us to erase your account entirely.
Complaint — if you believe we have mishandled your information you may complain to us directly, and, for Australian users, to the Office of the Australian Information Commissioner (OAIC). We handle personal information consistently with the Australian Privacy Principles under the Privacy Act 1988 (Cth).

8. Your content and AI

You own the writing you create on the Service. We claim no ownership of your projects, chapters, or ideas. Your content is not used to train AI models by us. Content sent to Google's Gemini API for generation is handled under Google's API terms; we send only what is needed to fulfil each request you make.

9. Children

The Service is not directed to children under 13 (or the minimum age of digital consent in your jurisdiction, if higher), and we do not knowingly collect personal information from them. If you believe a child has created an account, contact us and we will delete it.

10. Contact

Privacy questions, data requests, or verified legal process should be directed to: mvandiermen@outlook.com. We aim to respond to all privacy enquiries within 7 days.

11. Changes to this policy

If we make material changes to this policy we will update the effective date above and post the revised policy at this address before it takes effect. Continued use of the Service after changes take effect constitutes acceptance. We will never weaken the core commitment in this policy — no sale or third-party sharing of your data, and disclosure only under verified legal compulsion — without your explicit consent.