This Privacy Policy explains how Chronicle & Canvas (“Chronicle & Canvas,” “we,” “us,” or “our”) collects, uses, discloses, and protects your information when you use our website, applications, and related services (the “Service”). By using the Service, you agree to the practices described here.
1. Information We Collect
Information you provide
- Account information. When you sign in through a third-party identity provider (currently Discord), we receive your account identifier, username, display name, avatar URL, and email address.
- Campaign content. Any materials you upload or create through the Service — transcripts, audio recordings, notes, character descriptions, images, edits, comments, and similar inputs and outputs.
- Communications. Messages you send to us (e.g., support emails).
- Billing information. If you subscribe to a paid tier, our payment processor will collect payment-card or equivalent details. We do not store full card numbers on our servers.
Information we collect automatically
- Usage data. Logs about how you use the Service: pages visited, actions taken, timestamps, feature usage, and error reports.
- Device and connection information. IP address, browser type, operating system, and similar technical identifiers, used for security, abuse prevention, and analytics.
- Cookies and similar technologies. We use cookies and local storage to keep you signed in, remember preferences (e.g., theme, edit mode), and measure usage. You can manage cookies in your browser settings; doing so may affect functionality.
2. How We Use Your Information
We use the information we collect to:
- Provide, operate, maintain, and improve the Service;
- Process the materials you upload through our AI pipelines to produce portraits, scenes, transcripts, summaries, and chronicles;
- Authenticate you and maintain the security of your account (including detecting and preventing fraud, abuse, and policy violations);
- Bill you for subscriptions and manage your payment relationship;
- Communicate with you about the Service, including service notices, billing, security alerts, and (with your consent where required) product updates;
- Aggregate and analyze usage trends to understand and improve the Service;
- Comply with legal obligations and enforce our Terms.
We do not sell your personal information, and we do not use the content of your campaigns to train any machine-learning models of our own.
3. AI Processing and Third-Party Providers
Delivering Chronicle & Canvas’s features requires transmitting content you provide to one or more third-party AI and infrastructure providers, including (without limitation):
- Discord — for sign-in and (optionally) voice-channel recording for sessions captured live;
- Google Cloud Platform (including Cloud Storage and Firestore) — for hosting, file storage, and our database;
- Generative AI providers (such as Google Gemini, Anthropic Claude, and/or OpenAI) — for generating illustrations, prose, and other AI outputs;
- Transcription providers (such as AssemblyAI) — for converting audio recordings into transcripts;
- Payment processors — for subscription billing.
Each of these providers handles your information under their own privacy policies and terms. We choose providers that we believe offer reasonable protections, but we are not responsible for their independent practices.
4. Sharing Your Information
We share information only as needed to provide the Service or as described below:
- With service providers (as listed in Section 3) under contractual confidentiality and use restrictions;
- Public sharing you initiate. If you publish a chronicle via a public read link, the content of that chronicle becomes accessible to anyone who has the link until you revoke it;
- Legal requirements. When required to comply with law, regulation, or legal process, or to protect the rights, property, or safety of Chronicle & Canvas, our users, or others;
- Business transfers. If we are involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction, subject to standard confidentiality protections.
5. Data Retention
We retain your account information and campaign content for as long as your account is active or as needed to provide the Service. You can delete individual campaigns, sessions, or other artifacts through the Service at any time. If you delete your account, we will delete or anonymize your personal information and campaign content within a reasonable period, except where retention is required by law or for legitimate business purposes such as fraud prevention, dispute resolution, or backup-system rotation.
6. Security
We implement reasonable technical and organizational measures designed to protect your information — including encryption in transit, access controls, and provider-side encryption at rest — but no system is perfectly secure. You are responsible for keeping your account credentials confidential and notifying us promptly of any suspected unauthorized access.
7. Your Rights
Depending on your jurisdiction, you may have rights with respect to your personal information, including the right to: access, correct, or delete the personal information we hold about you; restrict or object to certain processing; receive a portable copy of your data; and withdraw consent where processing is based on consent. To exercise these rights, contact us at the address in Section 12. We will respond within the timeframe required by applicable law.
8. Children’s Privacy
The Service is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe we have inadvertently collected such information, please contact us and we will take steps to delete it.
9. International Transfers
The Service is operated from, and stores data with providers located in, jurisdictions that may differ from yours. By using the Service, you understand that your information may be transferred to, stored, and processed in those jurisdictions. Where required by applicable law, we rely on appropriate safeguards (such as standard contractual clauses) to protect cross-border transfers.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page and, where appropriate, notify you by email or through the Service. Continued use of the Service after the effective date of an updated policy constitutes acceptance of the updated terms.
11. Cookies in More Detail
We use cookies and similar technologies for three purposes: (a) authentication — to keep you signed in across sessions; (b) preferences — to remember user-interface choices like theme and edit mode; and (c) usage analytics — to understand how the Service is used in aggregate. Most browsers let you control or disable cookies through their settings; disabling them may prevent some features from working.
12. Contact
Questions, concerns, or requests about this Privacy Policy? Contact us at support@chroniclecanvas.com.