Welcome to Sekaiko ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you understand how we collect, use, store, and protect your personal information. This Privacy Policy explains our practices regarding data collection and use when you access and use Sekaiko, an AI-assisted fiction writing platform.
By using our service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our service.
When you create an account using Google OAuth authentication, we collect:
We collect and store all content you create and upload to Sekaiko, including:
We automatically collect information about how you use the service, including:
When you purchase tokens, payment information is processed by third-party payment providers (Stripe, PayPal). We do not store your full payment card information. We do collect:
If you connect your social media accounts (YouTube, TikTok), we collect:
We use the information we collect to:
Sekaiko integrates with various third-party services to provide functionality. We share information with these services as necessary:
Google OAuth:We use Google OAuth for user authentication. Google receives your authentication request and provides us with your email, name, and profile picture. Your use of Google OAuth is subject to Google's Privacy Policy.
To generate content, we send your prompts, User Content, and generation parameters to third-party AI providers. Each provider processes data according to their own privacy policies:
These providers may retain prompts and generated content for service improvement and compliance purposes as outlined in their respective privacy policies. We recommend reviewing their privacy policies for more information.
Cloudflare R2:We store media files (images, videos, audio) in Cloudflare R2 object storage. Files are stored in geographic regions determined by Cloudflare. Cloudflare's Privacy Policy governs their handling of stored data.
PostgreSQL Database: Your account information, User Content metadata, and structured data are stored in PostgreSQL databases hosted by cloud providers. Data is backed up regularly and encrypted at rest.
Redis Cache: We use Redis for caching to improve service performance. Cached data includes temporary session information and frequently accessed data. Cached data may be stored in memory or persistent storage.
When you connect social media accounts or share content:
We store encrypted access tokens to enable API access. You can revoke access at any time through your account settings or through the respective platform's settings.
Stripe and PayPal: Payment processing is handled by Stripe and PayPal. These providers collect and process payment information according to their privacy policies. We do not receive or store your full payment card information.
We may share information with service providers who perform services on our behalf, such as:
These providers are contractually obligated to protect your information and use it only for the purposes we specify.
We use cookies and similar tracking technologies to manage sessions and improve your experience:
NextAuth.js Session Cookies: We use NextAuth.js to manage user authentication sessions. Session cookies store encrypted session information and authentication tokens. These cookies are essential for the service to function.
JWT Tokens:We use JSON Web Tokens (JWT) for backend authentication. Tokens are stored in your browser's local storage or session storage and are sent with API requests to authenticate you.
We use cookies for:
You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of the service.
Your data may be stored in data centers located in various geographic regions:
We implement reasonable security measures to protect your information:
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
We retain your account information and User Content for as long as your account is active and as needed to provide the service. If you delete your account, we will:
Some information may be retained longer if required by law or for legitimate business purposes (e.g., transaction records for accounting purposes).
AI service providers may retain prompts and generated content according to their own data retention policies. We do not control how long these providers retain your data. Please review their privacy policies for information about data retention and deletion.
Deleted data may remain in backups for a limited period. Backups are retained for disaster recovery purposes and are deleted according to our backup retention schedule, typically within 90 days.
Depending on your location, you may have certain rights regarding your personal information:
You have the right to:
You can update most of your information through your account settings. For account information managed by Google OAuth, you must update it through your Google account.
You have the right to request deletion of your personal information and User Content. You can:
You may have the right to object to or restrict certain processing of your personal information. However, some processing is necessary to provide the service, and restricting it may limit your ability to use certain features.
You can:
To exercise these rights, please contact us using the contact information provided at the end of this Privacy Policy. We will respond to your request within 30 days, subject to applicable law.
Sekaiko operates globally and may transfer your information to countries other than your country of residence. Your information may be processed and stored in:
These transfers are necessary to provide the service. We ensure that appropriate safeguards are in place to protect your information, including:
By using the service, you consent to the transfer of your information to these countries.
Sekaiko is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete such information as soon as possible.
If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately. We will work with you to address your concerns and delete any information collected from children under 13.
For users between 13 and 18 years of age (or the age of majority in your jurisdiction), we recommend obtaining parental or guardian consent before using the service. Parents and guardians are responsible for supervising their children's use of online services.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. If we make material changes, we will notify you by:
Material changes will become effective thirty (30) days after such notice. Your continued use of the service after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Email: [Your Contact Email]
Website: [Your Website URL]
For privacy-related inquiries, please use the subject line "Privacy Inquiry" to help us respond more quickly.
If you are located in the European Economic Area (EEA) or United Kingdom, you may also have the right to lodge a complaint with your local data protection authority.
By using Sekaiko, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your information as described herein.