Privacy Policy

Account data: your email address, display name, preferred language, and — if you signed in with Google — the identifier that provider gives us. We store a hash of your password, never the password itself.

What you create: scripts, scenes, dialogue, characters, notes, uploaded files and generated images. This is your work, held so we can give it back to you.

Payment data: the order, the amount, the currency, and the reference PayPal gives us for the transaction. Your card details go to PayPal and never reach us. The payer reference we do keep is stored encrypted.

Usage and technical data: when you signed in, what you generated and how much quota or how many points it used, error reports, and standard request data including your IP address. We record an IP against a post view so a view is counted once rather than every refresh.

To provide the service you asked for — your account, your scripts, generations you request, and the payments you make. This is the performance of our contract with you.

To keep the service working and honest: rate limits, abuse prevention, debugging, and the alerts that tell us something broke. This is our legitimate interest in running a service that stays up.

To meet legal obligations, mainly around tax and accounting records for payments.

To tell you about your account — a verification code, a payment receipt, a change to these documents. Marketing is separate and only goes out if you asked for it.

When you ask for a generation, we send the relevant part of your script — not your whole account — to the AI provider handling that request.

Text generation runs on Amazon Bedrock and image generation on our image providers. Bedrock requests may be served from a region outside the one you are in, which means the text you submit for a generation can be processed abroad. We are telling you this plainly because it is a real transfer, not a technicality.

Our providers process this on our instructions to return your result. We do not permit them to use your content to train their models.

If you would rather nothing left the region, do not use the AI features — the editor, export and everything else works without them.

Amazon Web Services — hosting, databases, file storage and email delivery.

Cloudflare — the network in front of the site; it sees request metadata, not your script contents.

PayPal — payment processing. They are a controller of your payment data in their own right, under their own policy.

AI providers — as described above, for the request you asked for.

Analytics and error reporting — Google Analytics, Google Tag Manager, Microsoft Clarity and Sentry, which tell us how the site is used and what is breaking.

We do not sell your data, and we do not share it with advertisers. We disclose it to authorities only where a valid legal demand requires it.

We set the cookies that keep you signed in and remember your language and theme. Those are not optional — without them the site cannot work.

Analytics and session-replay tools set their own cookies. Clarity can record how you move around a page; it does not capture what you type into the editor.

Your browser's tracking controls apply here as anywhere else, and blocking the analytics cookies does not degrade the product.

Your account and your work: for as long as your account is open, plus the 30 days after you delete it during which the deletion can still be undone.

Payment and tax records: for as long as the law requires us to keep them, which outlasts your account. This is the one category deleting your account does not clear.

Exported files: seven days, then they are removed automatically. Download them when they are ready.

Logs and analytics: months, not years — long enough to investigate a problem and no longer.

Backups are kept on a rolling schedule, so deleted data can persist there briefly before the backup itself expires.

You can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, or object to a particular use. Email us and we will answer within thirty days.

For your scripts you do not need to ask: export gets you everything, in formats other tools can open, immediately.

If you think we have handled your data badly, tell us first — but you are entitled to complain to your local data protection authority regardless.

Deleting your account takes your profile, your scripts and scenes, your characters, and the files and generated images attached to them out of service immediately. They stop being reachable — by you, by collaborators, by share links, and by anyone who came across something you published.

They are then erased from our systems within 30 days. Until that happens the deletion can still be undone: email us and we will restore the account. After it happens, nothing can — not even us.

Scripts you only collaborated on are not yours to delete and are left alone; what ends is your access to them.

Records we are legally required to keep — payment and tax records in particular — survive the deletion, reduced to what the law requires and nothing more.

Export anything you want to keep before you start. It is one click, and it is the only copy that stays entirely in your hands.

Traffic is encrypted in transit, the database is encrypted at rest, and the sensitive columns — payment references among them — are encrypted again at the application layer.

Access to production data is limited to the people who need it to operate the service.

No system is perfect. If a breach ever affects your data, we will tell you and the relevant authority within the time the law allows, and we will tell you what actually happened rather than the smallest true thing.

Fenixs is not built for children and we do not knowingly collect data from anyone under the age at which they can consent for themselves where they live.

If you believe a child has given us their data, email us and we will remove it.

If what we do with your data changes materially, we will tell you before the change takes effect rather than editing this page quietly.

The date at the top is always the current version.

Email [email protected] with anything about your data, including a request to see it or delete it.

The party responsible for your data is Fenixs Technology Co., Ltd. (菲尼克斯科技有限公司), unified business number 00042238, registered at 7F., No. 3, Sec. 1, Hankou St., Zhongzheng Dist., Taipei City 100007, Taiwan (R.O.C.).