Privacy Policy

1. Scope and controller

This policy explains how the independent operator of FicWeave handles personal information when you visit ficweave.com, create an account, use AI generation or Story Memory, purchase Pro or Credits, or contact support. FicWeave is the controller of data used to operate the Service; some providers act as processors or independent controllers under their own terms.

2. Information we collect

• Account and authentication data: name, email address, account identifiers, authentication method, session records, security events, and hashed credentials where applicable. Email/password authentication is supported; Google sign-in data is handled if that option is offered and you choose it.
• Story and AI input data: fandom, character names, story ideas, continuation instructions, generated chapters, saved Stories, chapter versions, Story Memory, edits, and related context.
• Generation and entitlement data: model and provider identifiers, request status, token counts and estimated cost when available, timing, errors, cancellations, Credit reservations and consumption, plan status, and subscription periods. We do not intentionally store private model chain-of-thought.
• Payment and billing data: product, amount, currency, order and payment references, subscription status, billing period, and the email associated with checkout. Full card details are entered with and processed by Waffo Pancake or its payment partners; FicWeave does not receive or store the full card number or security code.
• Technical and security data: IP address or IP-derived anti-abuse identifiers, browser and device information, timestamps, cookies, request logs, and signals used to prevent fraud, rate-limit abuse, debug failures, and protect accounts.
• Analytics data: Google Analytics 4 may collect page views, interaction events, approximate location, browser/device information, session statistics, and first-party identifiers. GA4 commonly uses _ga and _ga_* cookies. FicWeave does not intentionally send story text, prompts, email addresses, or payment details in general analytics events.
• Support data: messages and any diagnostic details you choose to provide when requesting help, exercising privacy rights, or reporting abuse.

3. How we use information

We use information to provide and authenticate the Service; generate, save, and continue stories; build Story Memory; operate subscriptions and Credits; process and reconcile payments; screen prompts and enforce safety rules; prevent fraud and abuse; maintain reliability; provide support; understand aggregate product usage; and comply with legal obligations.

Depending on the context, processing is necessary to perform our agreement with you, pursue legitimate interests in operating and securing the Service, comply with law, or act on consent where consent is required. You can block or delete analytics cookies using browser controls, although strictly necessary authentication and security storage may still be required for signed-in features.

4. AI and content-safety providers

Story inputs and relevant saved context are sent to OpenRouter, which routes requests to the selected model provider, to generate prose or structured Story Memory. Provider retention and data-use rules can differ by model and endpoint. Do not submit secrets or personal information that is not needed for your story. See OpenRouter’s privacy policy and provider information for current details.

Before generation, user prompt text may be sent to Waffo Pancake’s content-safety service for an allow, review, or block decision. Waffo documents this scan as stateless and says prompt text is not retained after the response. FicWeave keeps the resulting service outcome only as needed to handle the request and diagnose compliance failures; it does not add prompt text to ordinary safety logs.

5. Service providers and disclosures

We may share the minimum information needed with:

• Cloudflare for website delivery, Workers hosting, networking, and security;
• Neon for the hosted PostgreSQL database;
• OpenRouter and downstream model providers for AI generation and Story Memory;
• Waffo Pancake and its payment partners for checkout, taxes, fraud prevention, subscriptions, refunds, and prompt safety;
• Google for Google sign-in when enabled and for Google Analytics 4;
• Resend for transactional email when email delivery is enabled; and
• professional advisers, authorities, or other parties when required by law or reasonably necessary to investigate fraud, security incidents, abuse, or rights violations.

We do not sell personal information. We do not use your private story text to train a FicWeave model. Third-party AI providers may have their own data practices, as described above.

6. Cookies and similar technologies

FicWeave uses necessary cookies or local storage for sessions, authentication, locale, security, and preserving an anonymous draft during the product’s stated draft window. Google Analytics may use first-party cookies to distinguish users and sessions and measure site usage. Your browser can block or clear cookies, but doing so may sign you out, remove a local draft, or prevent some features from working.

7. Retention

Saved account, Story, Chapter, and Story Memory data is retained while your account and saved content remain active, until you delete available content or we complete a verified deletion request, subject to legal obligations, fraud prevention, dispute records, and limited backups. Anonymous claim data is designed around a 24-hour claim window; local browser drafts follow the product’s local draft rules. Payment and subscription records may be retained as required for tax, accounting, refund, fraud, and dispute purposes.

Generation diagnostics and security logs are retained only as reasonably needed for reliability, abuse prevention, and reconciliation. Backup copies may persist for a limited period before being overwritten. We may retain de-identified or aggregated statistics that no longer identify you.

8. Security and international processing

We use access controls, encrypted transport, secret management, and provider security features appropriate to the Service. No online service can guarantee absolute security. Providers may process data in countries different from yours; where required, transfers rely on the provider’s contractual safeguards or other lawful transfer mechanisms.

9. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to processing; request portability; withdraw consent; or complain to a data-protection authority. You can update certain account details in settings, cancel Pro in billing settings, and control cookies through your browser. Self-service export and permanent account deletion are not yet complete features, so use the Contact page or email support@ficweave.com for a verified request. We may need to confirm your identity and may retain records where law permits or requires it.

10. Children

FicWeave is not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided information, contact us so we can investigate and take appropriate action. The Content Policy prohibits sexual content involving minors.

11. Changes and contact

We may update this policy as the Service or providers change. The date above identifies the latest revision. Material changes will be communicated through the Service or account email where reasonably required.

Privacy questions and rights requests can be sent to support@ficweave.com or through the Contact page.