Privacy Policy

This Privacy Policy explains how GlyphStack LLC ("GlyphStack," "we," "us," or "our") collects, uses, and shares information about you when you visit glyphstack.com or use our software applications, including ScribeSage, PlotCascade, InkSlide, NewsletterScriv, Instant Audiobook Video, Mini.Glyph, and FolioScriv (each an "App," and together with our websites, the "Services").

1. Who we are & scope

GlyphStack builds software for independent authors. This policy applies to all of the Services listed above. Some Apps may present their own supplementary privacy notice for features unique to that App; where that happens, the App-specific notice applies in addition to this policy, and this policy governs anything not addressed there.

The Apps are operated as an interoperating suite under a single GlyphStack account, and information may move between them to provide integrated features. See How we share information. We also use analytics and advertising technologies on our public marketing pages; see Cookies & tracking, which describes what they are, the pages on which they operate, and how to opt out.

The party responsible for your information is GlyphStack LLC, a Pennsylvania limited liability company, P.O. Box 494, Benton, PA 17814, United States. You can reach us at legal@glyphstack.com.

When we act on your instruction instead

The preceding paragraph describes our role in respect of personal information relating to you, as the holder of a GlyphStack account. Certain Apps additionally process personal information relating to third parties at your direction. In NewsletterScriv, for example, the mailing list you compile consists of personal information relating to your subscribers, which we store and transmit solely upon your instruction.

In respect of that information, you act as the controller and GlyphStack acts as the processor. We process it only on your documented instructions, we do not use it for our own purposes, and a request from one of your subscribers is ordinarily directed to you as the list owner, with GlyphStack acting as a backstop where you cannot be reached. NewsletterScriv's own Privacy Policy sets out that allocation of roles in full, and governs to the extent it is more specific than this policy.

2. Information we collect

Information you provide to us

• Account information. When you create an account, we (through our authentication provider, Clerk) collect your name, email address, and login credentials or third-party sign-in identifiers.
• Payment information. When you purchase a subscription or product, our payment processor (Stripe) collects your payment card and billing details. We do not store full payment card numbers on our servers; we receive limited information such as the last four digits, card brand, and billing country to manage your subscription.
• Content you provide. To operate the Apps, we process the content you upload or create — for example manuscripts, chapters, outlines, notes, source documents, audio files, cover images, book files, and the prompts and instructions you enter (collectively, "User Content").
• Third-party API keys. Certain Apps let you connect your own AI provider keys ("bring your own keys"). If you choose to do so, we store those keys in encrypted form solely to perform the actions you request.
• Communications. If you contact us for support or otherwise, we keep your messages and contact details.

Information we collect automatically

• Usage data. Features used, actions taken, and other interactions with the Services.
• Device & log data. IP address, browser type, operating system, referring pages, and timestamps.
• Cookies & similar technologies. Including cookie and device identifiers set by the analytics and advertising technologies we deploy. See Cookies & tracking below.

3. How we use information

• Provide, operate, maintain, and improve the Services;
• Create and manage your account and authenticate you;
• Process payments, subscriptions, and prevent fraudulent transactions;
• Perform the AI-assisted and file-processing features you request;
• Provide customer support and respond to your requests;
• Monitor and secure the Services and enforce our Terms;
• Send you service-related and, where permitted, marketing communications (you can opt out of marketing at any time);
• Comply with legal obligations.

We do not sell your personal information. We do not use your private User Content to train our own machine-learning models. We do not disclose your email address, or the email address of any subscriber to your mailing list, to any advertising network.

4. AI features & your content

Several Apps use artificial intelligence to help you write, plan, format, or produce media. When you use these features, the relevant User Content (such as your prompts and the text or files you choose to process) is transmitted to third-party AI providers — which may include OpenAI, Anthropic, Google, xAI, and similar services — so they can generate outputs for you.

Your use of these features is also subject to the applicable AI provider's terms and privacy practices. Where an App uses your own API keys ("bring your own keys"), your requests are made under your own account with that provider and are governed primarily by your relationship with them. AI outputs can be inaccurate or unsuitable; you are responsible for reviewing them before use.

5. How we share information

Between our own Apps

The Apps are operated by a single entity, GlyphStack LLC, and are designed to interoperate as a suite. A single GlyphStack account may be used across any number of Apps, and your account information, User Content, and usage data may be transferred between Apps where doing so is necessary to provide, or to make available, an integrated feature — for example, to carry a manuscript and its metadata from a writing tool into a formatting, publishing, or marketing tool, or to make a single subscription and its entitlements effective across the suite.

Transfers of that kind occur within GlyphStack LLC and do not constitute a disclosure of personal information to a third party. Where an integrated feature requires transmission to an external provider, that provider is a service provider (subprocessor) and is covered below. Personal information relating to your subscribers is not transferred between Apps for any purpose other than one you have instructed, consistent with our role as processor described in Who we are & scope.

With third parties

We share information with third parties only as described here:

• Service providers (subprocessors). With vendors who perform services for us, such as payment processing (Stripe), authentication (Clerk), database hosting (Neon, LLC), cloud hosting and storage (including Google Cloud), AI providers, email delivery (including Amazon Web Services, whose Simple Email Service delivers NewsletterScriv campaigns), and analytics — each only to the extent needed to provide their service to us.
• Legal & safety. When required by law, subpoena, or legal process, or to protect the rights, property, or safety of GlyphStack, our users, or others.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to this policy.
• Advertising partners. Advertising networks we buy ads from, which may include Meta Platforms, Inc., OpenAI, L.L.C., Google LLC (Google Ads, including Demand Gen), and similar partners we may add later, by means of the advertising measurement technologies described in Cookies & tracking. The information disclosed is limited to the fact that a browser or device accessed one of our public marketing pages, together with associated cookie or similar identifiers, and, when an account signup occurs, a report that a signup happened. It does not include your account information, your User Content, hashed emails, or personal information relating to subscribers to your mailing list.
• With your consent or at your direction.

We do not sell personal information for monetary consideration. We do disclose a limited category of personal information in a manner that constitutes "sharing" for cross-context behavioral advertising, as that term is defined under the California Consumer Privacy Act, as amended: specifically, advertising measurement technologies from the advertising networks we buy ads from — which may include Meta, OpenAI (ChatGPT Ads), Google Ads (including Demand Gen), and similar partners — enable those partners to associate a browser or device that has accessed our public marketing pages with their own advertising identifiers, for the purposes of conversion measurement and audience targeting. You may opt out of that disclosure at any time by the means described in Your privacy choices. No advertising or analytics technology is deployed within the authenticated portions of the Apps, or on any page accessed by a subscriber to your mailing list.

6. Cookies & tracking

We use cookies and similar technologies to keep you signed in, remember your preferences, secure the Services, and understand how the Services are used. Strictly necessary cookies are required for the Services to function. You can control non-essential cookies through your browser settings; disabling some cookies may affect functionality.

Analytics & advertising technologies

We use analytics and advertising technologies. We deploy third-party measurement and advertising technologies on our public marketing pages, for the purpose of evaluating and improving the effectiveness of our marketing.

Google Analytics (Google LLC) measures aggregate traffic to, and usage of, those pages. What Google does with that information is governed by Google's own privacy policy.

Those same marketing pages may also carry advertising measurement technologies from the advertising networks we buy ads from. That is separate from the Google Analytics described above. Depending on which networks we are buying from, that can include Meta, OpenAI (ChatGPT Ads), Google Ads (including Demand Gen), and similar partners we may add later. These tags measure whether an ad brought someone here. They are advertising technology: they may set cookies or use similar technology so the network can recognize a browser it has seen elsewhere, under that partner's own privacy policy. They run only on those marketing pages — never where a reader goes, and never inside the dashboard.

We do not use Enhanced Conversions, Advanced Matching, or any similar identity feature: we do not send hashed emails, account identifiers, or any other identifying account field to an advertising network. When you create an account we may report that a signup happened, and nothing identifying. The opt-out below or a Global Privacy Control signal stops these tags and any matching server event we control. A tracker-blocking extension can also block the client tags. Nothing on the site behaves differently when they are blocked.

Scope of deployment. These technologies may be deployed on any of our public marketing pages, including glyphstack.com and the marketing pages of any App. They are not deployed within the authenticated portions of any App, and accordingly your working session is not used for marketing purposes. Nor are they deployed on any page accessed by a member of your own audience — including, in the case of NewsletterScriv, your landing pages, the hosted web version of your emails, your archive, and your download and unsubscribe pages. That limitation is enforced programmatically by means of a path allowlist, and does not depend upon adherence to this policy alone.

These technologies are blocked by commonly available tracker-blocking software and by browser-level tracking protection. No functionality of the Services is impaired where they are blocked.

Your privacy choices

You may opt out of the technologies described above by either of the following means, without contacting us:

• Opt-out preference signal. Where your browser or a browser extension transmits a Global Privacy Control ("GPC") signal, we treat that signal as a valid request to opt out, and no analytics or advertising technology is loaded. No further action is required of you.
• Manual opt-out control. The Your Privacy Choices control disables these technologies for the site on which it appears. Your election is stored locally within your own browser; we do not maintain a server-side record of opt-out elections, as doing so would require identifying the individual who has requested not to be identified.

We do not employ a consent banner. The mechanisms described above are intended to give effect to the same election without interposing a dialog before each visitor.

7. Data retention

We retain your information for as long as your account is active or as needed to provide the Services, and afterward only as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated User Content as described below; some information may be retained in backups or where required by law.

Where an App promises something more specific, that promise applies to the information held in that App and takes precedence over the general statement above. NewsletterScriv, for example, commits to holding a closed account's data for five years and to warning you three times before anything is removed.

One category is kept permanently, by design. Where an App sends email on your behalf, we keep a suppression record of every address that has unsubscribed, bounced, or reported a message as spam. That record is the mechanism that stops the same person being emailed again, so it has to outlive the list it came from — it survives deletion of that list, and deletion of your account. It holds only what is needed to block a future send, and is never used for any other purpose. This is the one exception described on our Data Deletion page.

8. Data security

We use administrative, technical, and organizational safeguards designed to protect your information, including encryption in transit and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please protect your account credentials and any API keys you provide.

9. Your rights & choices

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise any of these rights, email us at legal@glyphstack.com. We will respond as required by applicable law and will not discriminate against you for exercising your rights.

EEA/UK residents

If you are in the European Economic Area or the United Kingdom, our legal bases for processing include performance of our contract with you, our legitimate interests, your consent, and compliance with legal obligations. You may lodge a complaint with your local data protection authority.

California residents

If you are a California resident, you have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"), including the right to know, to delete, and to correct personal information, and the right to opt out of the sale or sharing of personal information.

We do not sell personal information for monetary consideration. We do share personal information for cross-context behavioral advertising, within the limited scope described in Cookies & tracking, by means of advertising measurement technologies from the advertising networks we buy ads from (which may include Meta, OpenAI, Google Ads, and similar partners) deployed on our public marketing pages. The categories of personal information so shared are internet or other electronic network activity information and unique online identifiers; the category of third party to whom that information is disclosed is an advertising network. You may exercise your right to opt out by means of the Your privacy choices control, or by transmitting a Global Privacy Control signal, which we honor as a valid opt-out preference signal. We will not discriminate against you for exercising any right conferred by the CCPA/CPRA.

10. International data transfers

We operate from the United States, and your information is stored and processed there. Some of the service providers listed above operate in other countries; when personal information is transferred across borders, we rely on appropriate safeguards where required by law. By using the Services, you understand your information may be processed in countries whose data-protection laws may differ from those in your country.

11. Children's privacy

The Services are intended for adults and are not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us personal information, contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Services after an update means you accept the revised policy.

13. Contact us

Questions about this policy or your information? Contact us at:

GlyphStack LLC, a Pennsylvania limited liability company
P.O. Box 494, Benton, PA 17814, United States
Email: legal@glyphstack.com
Phone: +1 570 416 2639