Privacy Policy

This Privacy Policy explains how ZuoJiaAgent (作家智能体) collects, uses, shares and protects personal data when you use our website at zuojiaagent.com and our AI-assisted writing service (together, the "Service").

We are committed to handling your personal data responsibly and in accordance with applicable data protection laws, including the EU/UK General Data Protection Regulation (GDPR) where it applies.

1. Data we collect

1.1 Information you provide

• Account data: your email address, display name, hashed password (or third-party login identifier), and profile preferences.
• Content you create: text, outlines, character notes and other materials you enter, upload or generate within the Service ("Your Content").
• Communications: messages you send to our support address, including any information you choose to include.
• Billing details: when you purchase credits or a subscription, you provide payment information to our payment provider. We do not receive or store your full card number — see Section 4.

1.2 Information collected automatically

• Usage data: features used, credit consumption per operation, session timestamps and interaction events, used to operate the Service and meter usage.
• Technical data: IP address, browser type and version, operating system, device type, language preference and referring URL.
• Cookies and similar technologies: strictly necessary cookies for authentication and session management, plus preference storage such as your selected language. See Section 9.

1.3 Information we do not seek

We do not intentionally collect special category data (such as health, biometric, political or religious data) and we ask that you do not submit such data to the Service.

2. How we use your data

We process personal data for the following purposes:

• Providing the Service: creating and securing your account, processing your requests, generating AI output, and storing your projects.
• Metering and billing: tracking credit consumption and managing subscriptions and purchases.
• Communicating with you: responding to support requests and sending essential service notices (for example, security or billing notifications).
• Improving the Service: analysing aggregated usage patterns to fix issues and improve performance and features.
• Security and abuse prevention: detecting fraud, misuse, unauthorised access and violations of our Terms of Service.
• Legal compliance: meeting our legal, tax and accounting obligations.

3. Legal bases for processing (GDPR)

Where the GDPR applies, we rely on the following legal bases:

• Performance of a contract — to provide the Service you have signed up for and to fulfil purchases (Article 6(1)(b)).
• Legitimate interests — to secure the Service, prevent abuse, and improve our product, balanced against your rights (Article 6(1)(f)).
• Legal obligation — to comply with tax, accounting and other legal requirements (Article 6(1)(c)).
• Consent — where we ask for it specifically (for example, optional marketing communications). You may withdraw consent at any time (Article 6(1)(a)).

4. Payment processing and Merchant of Record

Our order process is conducted by our online reseller Paddle.com Market Ltd. ("Paddle"), which acts as the Merchant of Record for all orders. Paddle is the seller of record and handles payment processing, billing, invoicing and global tax compliance on our behalf.

When you make a purchase, your payment details are provided directly to Paddle and its payment processors. We do not receive or store your full card number. We receive limited order information (such as order status, amount, currency and a customer identifier) so that we can deliver credits or subscription access to your account.

Paddle processes personal data in accordance with its own privacy policy and acts as an independent controller for the payment and tax compliance purposes it handles. You can review Paddle's privacy practices at paddle.com/legal/privacy.

5. AI processing of your content

To produce AI-generated text, the content you submit for a given operation (together with relevant context from your project, such as your outline or character notes) is transmitted to third-party AI model providers for processing.

• This transmission is necessary to perform the operation you requested and occurs only when you invoke an AI feature.
• We do not use Your Content to train our own AI models, and we do not sell Your Content.
• Third-party model providers process the data under their own terms; we select providers that offer appropriate data protection commitments.

6. Sharing your data

We do not sell your personal data. We share it only as necessary and with the following categories of recipients:

• Payment and Merchant of Record: Paddle.com Market Ltd. and its payment processors, for processing purchases and tax compliance.
• Hosting and infrastructure providers: to store data and run the Service.
• AI model providers: to generate text in response to your requests.
• Analytics and error monitoring: to understand usage and diagnose faults, using aggregated or pseudonymised data where possible.
• Email delivery providers: to send transactional emails such as account verification and receipts.
• Professional advisers and authorities: where required by law, to respond to lawful requests, or to establish or defend legal claims.

7. International data transfers

Some of our service providers are located outside your country of residence, including outside the European Economic Area. Where personal data is transferred internationally, we rely on appropriate safeguards such as standard contractual clauses approved by the European Commission, or an equivalent lawful transfer mechanism.

8. Data retention

• Account data is retained while your account remains active and for a reasonable period afterwards to allow recovery.
• Your Content is retained until you delete it or close your account, subject to backup cycles.
• Billing and transaction records are retained as required by tax and accounting law.
• Support communications are retained for a reasonable period so we can resolve follow-up questions.

When data is no longer needed, we delete it or anonymise it so that it can no longer be linked to you.

9. Cookies

We use a small number of cookies and similar storage technologies:

• Strictly necessary: authentication and session cookies that keep you signed in and secure the Service. These cannot be disabled while using the Service.
• Preference storage: remembering settings such as your language and theme.

We do not use cookies to build advertising profiles. You can clear cookies in your browser settings, though this may sign you out.

10. Security

We apply appropriate technical and organisational measures to protect personal data, including encryption in transit (HTTPS/TLS), access controls, and password hashing. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

If we become aware of a personal data breach that affects your rights, we will notify you and any relevant authority where required by law.

11. Your rights

Depending on where you live, you may have the following rights in relation to your personal data:

• Access — obtain a copy of the personal data we hold about you.
• Rectification — correct inaccurate or incomplete data.
• Erasure — request deletion of your data in certain circumstances.
• Restriction — ask us to limit processing in certain circumstances.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests, including profiling.
• Withdraw consent — where processing is based on consent, withdraw it at any time.
• Lodge a complaint — with your local data protection authority.

To exercise any of these rights, email support@zuojiaagent.com. We will respond within the timeframe required by applicable law, normally within 30 days. We may need to verify your identity before acting on a request.

California residents: you have the right to know what personal information we collect and how it is used, to request deletion, and to opt out of the "sale" or "sharing" of personal information. We do not sell personal information. To exercise your rights, contact us using the details above.

12. Children's privacy

The Service is not directed at children under 13 (or the minimum age of digital consent in your jurisdiction), and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we will take steps to delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the current version. Material changes will be communicated through the Service or by email where appropriate.

14. Contact us

For any privacy question, request or complaint, contact:

---

See also: Terms of Service · Refund Policy · Pricing · Support