novelia Privacy Policy
Privacy Policy for the AI story generation service "novelia" operated by Novelia ("we," "us," or "our")
Last Updated: March 1, 2025
1. Introduction & Legal Basis for Processing
We collect and process personal data in accordance with the Japanese Act on the Protection of Personal Information (APPI), the EU General Data Protection Regulation (GDPR), and applicable local laws.
Our legal bases for processing personal data (GDPR Art. 6) include:
- Contract performance — processing necessary to provide the Service you have subscribed to
- Legitimate interests — fraud prevention, security, analytics, AI model improvement
- Legal obligation — compliance with applicable laws
- Consent — marketing communications, optional analytics cookies (you may withdraw consent at any time)
2. Data Controller
3. Data We Collect
3.1 Information You Provide
- Account: email address, username, password (hashed), date of birth or age, profile photo (optional)
- Payment: billing details processed by Stripe — we do not store raw card data
- Support: inquiry content, name, email
3.2 Automatically Collected
- Device & network: IP address, browser type & version, OS, screen resolution, language, timezone
- Usage: access timestamps, pages viewed, referrer URL, session duration, clicks, search queries
- Service-specific: story generation history, reading history, favorites, prompt inputs, generated content
- Cookies: session ID, login state, advertising identifiers
3.3 From Third Parties
- Social login providers (LINE, etc.): user ID, display name, profile photo, email
4. How We Use Your Data
- Providing, operating, and improving the Service
- Account management, identity verification, authentication
- Customer support and responding to inquiries
- Usage analytics and service quality improvement
- AI model training and improvement (see Section 5)
- Payment processing and fraud prevention
- Legal compliance and security
5. AI Training Data
To improve our service quality, we may use generated content and prompt inputs as AI training data. Before such use, we anonymize data by removing or masking personally identifiable information (name, email, user ID, etc.).
Opt-out
You can opt out of AI training data use at any time by:
Note: Due to technical constraints, it may not be possible to remove data from models already trained.
6. Third-Party Data Sharing
We do not sell your personal data. We share data only with:
- AI service providers for story generation
- Payment processor: Stripe, Inc.
- Analytics: Google Analytics
- Law enforcement when required by applicable law
- Business successors in the event of a merger or acquisition
7. International Data Transfers
We transfer personal data to the United States and other countries where our service providers operate (Stripe, AWS, and AI service providers). These transfers are safeguarded by:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Adequacy decisions or equivalent mechanisms where applicable
For more information on the safeguards in place, contact us at support@novelia.site.
8. Cookies & Tracking
We use the following categories of cookies:
- Essential — login state, session management, security (cannot be disabled)
- Functional — user preferences (language, display settings)
- Analytics — usage analysis via Google Analytics (opt-out available)
- Advertising — targeted ads via Google AdSense (opt-out available)
You can manage cookies through your browser settings. Disabling certain cookies may limit Service functionality.
9. Data Retention
- Account data: deleted promptly upon account closure, subject to legal obligations
- Generated content: retained while account is active; deleted 30 days after account closure
- Payment records: up to 7 years as required by law
- Access logs: 6 months
- Support inquiries: up to 3 years after resolution
10. Your Rights
GDPR Rights (EU/EEA residents)
- Access — request a copy of your personal data
- Rectification — correct inaccurate or incomplete data
- Erasure ("right to be forgotten") — request deletion of your data
- Data portability — receive your data in a structured, machine-readable format
- Objection — object to processing based on legitimate interests
- Restriction of processing — request that we limit how we use your data
- Withdraw consent — at any time, where processing is based on consent
- Lodge a complaint — with your national data protection supervisory authority
CCPA Rights (California residents)
- Right to know — categories and specific pieces of personal information collected
- Right to delete — request deletion of personal information we have collected
- Right to opt-out of sale — we do not sell personal information
- Right to non-discrimination — we will not discriminate for exercising CCPA rights
How to Exercise Your Rights
Email support@novelia.site with your request. We will respond within 30 days. Identity verification may be required.
11. Children's Privacy (COPPA)
The Service is not directed to children under 13. We do not knowingly collect personal data from children under 13. If we discover that a child under 13 has provided personal data, we will delete it promptly. Users under 18 require parental consent.
12. Security
We implement industry-standard security measures including SSL/TLS encryption, access controls, firewall protection, and intrusion detection systems. However, no internet transmission is 100% secure.
13. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or applicable law. Material changes will be communicated via in-Service notices or email. Continued use of the Service after the effective date constitutes acceptance of the updated policy.
14. Contact Us
Novelia — Data Protection Officer
Email: support@novelia.site
Business hours: Mon–Fri, 10:00–18:00 JST
EU/EEA residents may also lodge a complaint with the supervisory authority in your country of residence.