Privacy Policy

Privacy Policy

Last updated: August 26, 2026

Introduction

Nova Celora is an interactive storytelling platform. This Privacy Policy explains what information we collect, how we use it, and the choices you have when you use the Service.

Nova Celora (the operator of the Service) is responsible for the personal data described here. By using the Service, you acknowledge that your story activity, account details, and usage data may be processed to operate sessions, improve safety, and keep the platform working reliably.

Data We Collect

We collect information that you provide directly and information that is generated when you use the Service, including:

  • Email address and account credentials.
  • Profile and authentication details.
  • Story session contents and user-generated choices.
  • Payment and billing details processed through third-party providers.
  • Device, browser, and usage data such as log records, session activity, and preference storage.
  • Cookie and local storage data used for login state, age consent, and site preferences.

How We Use Your Data

We use the information we collect to:

  • Provide, maintain, and improve the Service.
  • To authenticate your account and maintain session persistence.
  • Process story content using AI language models for narration, memory, retrieval, and safety checks.
  • Store and restore your preferences, age consent, and login state.
  • Detect abuse, prevent fraud, and keep the platform secure.
  • Communicate with you about your account and service updates.

Legal Bases for Processing

Where data-protection laws such as the EU/UK GDPR apply, we rely on the following legal bases to process your information:

  • Performance of a contract — to provide the Service you ask for, including accounts, sessions, and purchases.
  • Legitimate interests — to secure the platform, prevent abuse and fraud, and improve the Service.
  • Consent — for age-restricted access, non-essential cookies, and any optional features that ask for it. You can withdraw consent at any time.
  • Legal obligation — to meet accounting, tax, and other legal requirements.

How We Share Information

We may share limited information with service providers that help us run the platform, including infrastructure, analytics, authentication, AI, and payment processors.

We may also disclose information when required by law, to respond to legal requests, to protect the rights and safety of users or the platform, or in connection with a business transfer. We do not sell your personal information.

Third-Party AI Processing

Your story content may be processed by third-party AI providers to generate narration, options, summaries, and memory features. Those providers may receive prompts, context, and other data needed to deliver the Service.

We use those providers to operate the Service, but their systems and policies are controlled by the provider, not by us. Content sent to them is handled under their own terms.

International Data Transfers

We and our providers may store and process information in countries other than your own, including the United States. Where required, we rely on appropriate safeguards — such as standard contractual clauses — to protect your information when it is transferred across borders.

Cookies and Similar Technologies

We use cookies and local storage to keep you signed in, remember your age consent, and store site preferences. These are essential to how the Service works.

We may also use analytics cookies to understand how the Service is used, only where this is permitted or you have consented. You can manage non-essential cookies through the cookie preferences link in the footer or through your browser settings.

Sensitive Information

Because story content is user-generated and open-ended, the material you create may occasionally reveal information of a sensitive nature. Where any such content is treated as a special category of data under applicable law, we rely on the explicit consent you provide when you confirm your eligibility and choose to submit that content.

You can withdraw that consent at any time by stopping use of the Service and requesting deletion of your account.

Data Security

We use reasonable technical and organizational measures designed to protect your information against unauthorized access, loss, or misuse. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Data Retention and Deletion

We keep information only as long as reasonably necessary to operate the Service, comply with law, resolve disputes, and enforce our agreements.

You can request deletion of your account and associated data by contacting us at [email protected]. Once your identity is confirmed, we will action deletion without undue delay and in any event within the period required by applicable law — generally within one month, which may be extended by up to two further months where the request is complex or numerous, as permitted by the GDPR. We may retain certain information where we need it for legal, accounting, tax, security, or fraud-prevention purposes, or where the law otherwise permits.

Encrypted backups may persist for a limited period after deletion before being overwritten or removed through normal retention cycles.

Children and Age Restrictions

The Service is intended for adults 18 years of age or older and is not directed to children. We do not knowingly collect personal information from anyone under 18.

If we learn that an underage account has been created, we may restrict access and delete the associated information where appropriate.

Your Privacy Rights

Depending on where you live, you may have the right to:

  • Access, correct, or update the personal information we hold about you.
  • Request deletion of your account and personal data.
  • Request a copy of your data in a portable format.
  • Object to or restrict certain processing, and withdraw consent you have given.
  • Opt out of any "sale" or "sharing" of personal information — we do not sell your data.
  • Lodge a complaint with your local data-protection authority.

You can update your account information, manage cookie preferences through your browser, and exercise these rights by contacting us. We respond to verified requests within the timeframes required by applicable law — generally within one month under the GDPR, extendable by up to two further months for complex or numerous requests, and within 45 days under the CCPA, extendable by a further 45 days where permitted. Some data may still be retained when required for security, accounting, tax, or legal compliance.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the date shown on this page and may provide additional notice when appropriate.

Contact Information

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at [email protected].