1. Introduction

Welcome to Everlore! This Privacy Policy explains how we collect, use, and protect your personal data when you use our Service.

Data controller: Everlore, published by Pierre Bonnet, an independent founder based in France. For any question about your data, you can reach us at admin@everlore.app or via the Contact section of the Service.

2. Information We Collect

We collect data to operate, secure, and personalize your experience. This includes:

• Account Data: Your email address, username, and password (securely hashed). If you log in via third-party authentication providers (e.g., Google), we receive tokenized identifiers but do not store a local account password.

• Preference and Onboarding Data: Your explicitly shared choices regarding literary preferences used to tailor the interactive narrative feed.

• Service Usage Data: Information about your interaction with the platform, including your personal digital bookshelf, reading completion status, notes, bookmarks, and generative text prompts.

• Feedback & Communications: Content from support messages, bug reports, and text submissions sent through our feedback tools.

• Technical Telemetry & Analytics: Device indicators, browser types, page view histories, response times, and general interactions monitored to evaluate app performance.

3. Purposes and Legal Bases for Processing

We process your data under the following valid legal frameworks:

• Performance of a Contract: To authenticate your account, maintain infrastructure, process your monthly subscription, and provide core interactive storytelling features.

• Legitimate Interests: To monitor performance metrics, safeguard the Service against illegal use or systematic scraping, and build an aggregated understanding of content engagement.

• Consent: For optional platform analytics trackers or promotional communications. You maintain the right to withdraw your consent at any time via your settings.

4. Artificial Intelligence & Content Generation

Everlore utilizes advanced generative artificial intelligence models to structure and render works of fiction. Your reading history, persona, and custom prompts are processed in real-time to generate responses.

Crucially, we do not use your private narrative interactions or personal user profile data to train foundational or public AI models. Data shared with our cloud infrastructure and integrated large language model (LLM) vendor endpoints is pseudonymized using randomized system IDs to remove direct personal identifiers.

5. Data Recipients and Service Processors

We do not sell, rent, or trade your personal information. To maintain system reliability, we collaborate with trusted technical sub-processors who handle data under strict confidentiality obligations:

• Database Infrastructure: Turso (for secure user records management).

• Application Hosting & Infrastructure: Vercel (for serverless deployment and performance monitoring).

• Product Analytics: PostHog (privacy-focused analytics strictly hosted within the European Union).

Whenever technical telemetry routes through partners managing nodes outside the European Economic Area, standard contractual clauses are deployed to ensure equivalent protection safeguards.

6. Data Retention Timelines

Account profiles, preferences, and private bookshelves remain intact for as long as your account remains actively registered. Upon receiving an account deletion request, your direct personal data will be completely erased or permanently anonymized within 30 days.

Transactional records related to your monthly subscription billing will be retained for 5 to 7 years exclusively to comply with French fiscal reporting and legal accountability requirements.

7. Your Rights

Depending on your location, you may have certain rights regarding your personal data, including the right to access, correct, delete, or restrict processing of your information. You may also have the right to object to certain types of processing and to data portability.

To exercise these rights, please contact us via the Contact section of the Service.

8. Cookies and Tracking Technologies

Our platform uses functional, essential cookies to keep you securely signed into your dashboard. For non-essential performance tracking or advanced product analytics (such as PostHog patterns), we deploy an explicit cookie consent banner across the EEA. You can modify your choices or revoke permission seamlessly at any time from your account configuration panel.

9. Children's Privacy Guardrail

Everlore is strictly designed, structured, and intended for an adult audience (18+). We do not knowingly invite registration from or collect information belonging to individuals under the age of 18. If you have reason to suspect a minor has created an account, please contact us via the Contact section of the Service, and we will delete the account data immediately.

10. Security Practices and Breach Protocol

We implement robust administrative, structural, and technical safeguards to keep your text profiles secure, including end-to-end HTTPS encryption and cryptographic password hashing. While no platform can guarantee absolute mathematical immunity, in the highly improbable event of a data breach impacting your information, we will notify you via email within 72 hours.