Privacy Policy

This is Kalrova's substantive review draft, prepared from the application's data flows. It is not yet an effective privacy notice. Publication requires confirmation of contact arrangements, processor contracts, retention schedule and international transfer arrangements.

1. Who is responsible

Kalrova is an AI-assisted writing and publishing application for adults, operated by Kalrova LLC, a single-member limited liability company based in Texas, United States. This notice explains how Kalrova handles personal information when you use the service. Contact us using the privacy address displayed below for privacy questions and requests. Any required representative details must be confirmed before this notice takes effect.

2. Information we handle

Account information includes your email address, authentication identifiers, profile, language and onboarding preferences, legal acceptance records and age declaration. Our authentication provider handles credentials. We record session information to recognize authenticated requests.

Creative information includes the projects, manuscripts, characters, story bibles, outlines, images, research sources, interview material, voice samples, translations, conversations, edits and AI outputs you submit or create. It can include information about you or other people. Do not upload information you are not entitled to use. Use particular care with sensitive personal information and unpublished third-party material.

Service records include generation jobs, model usage and costs, credit balances and ledger entries, subscription and payment references, export records, feedback, support messages, moderation decisions and security audit records. Payment details are entered with Stripe; Kalrova stores payment references and subscription/invoice information rather than full card numbers.

If you choose an age-verified feature, Stripe Identity processes the verification materials. Kalrova stores a verification reference, status and associated timestamps. An 18+ signup declaration is not identity verification.

3. Purposes and legal grounds

We use account and creative information to provide the service you request: saving, editing, generating, researching, translating, exporting, sharing and managing your account. Where applicable, this processing is necessary to perform our contract with you. We use billing information to administer purchases and meet accounting obligations.

We use limited operational and security information to protect accounts, investigate abuse, enforce service rules and maintain reliability. Where applicable, we rely on legitimate interests, subject to your rights, or legal obligations. We use optional product analytics only with your choice to enable it. You can withdraw that choice without losing access to writing features. Accepting terms or acknowledging this notice is not consent to optional analytics.

Any legal basis that depends on local law or sensitive information must be assessed for the relevant processing and country. A person's presence in a manuscript does not itself establish their consent.

4. AI, research and service providers

When you request AI assistance, relevant instructions, selected content, retrieved project context and sometimes images or source excerpts are sent to the model providers used for that task. Context can include related chapters, saved canon, research and earlier conversation, not only the text in the current input box. Provider routing and fallback may change which provider processes a request.

The application supports OpenAI, Google Gemini, Anthropic and additional configured text or image providers. The publication review must identify which are enabled. Provider retention, abuse review, caching and training terms depend on the provider and account agreement. We do not promise zero retention or that every provider uses the same terms. The AI-content disclosure explains limitations of generated material.

Research can send a query derived from your request to search services and retrieve external sources. External publishers receive the service's fetch request. If you follow an external link, that website handles your visit under its own terms.

Other service providers support authentication, database and file storage, hosting, queues, transactional email, payments, age verification and operational error reporting. We use them for the applicable service purpose. A verified list of active providers, locations and contract terms must be approved before launch; supported integrations alone are not proof that a provider is active.

5. Sharing and visibility

Your private workspace is not made public merely because you use AI. Sharing, collaboration, publication and export features can make selected material available to recipients, collaborators, readers or publishing services you choose. Review the destination and permissions before using them. Copies already downloaded or published outside Kalrova may remain outside our control.

Authorized personnel may access information needed for support, security, moderation and service administration. We may disclose information when legally required or reasonably necessary to protect rights and safety. Kalrova's optional analytics does not sell personal information, serve advertisements or build cross-site advertising profiles.

6. Optional analytics and operational records

Optional first-party analytics counts a fixed set of workspace actions by UTC day. The analytics payload contains an allowed event name and consent version, not manuscript text, project identifiers, page URLs or a persistent visitor identifier. Counts cannot tell us who performed an action or how many distinct people used a feature. Daily counters expire after 90 days.

Analytics is off until you enable it in Analytics preferences. You can reject or withdraw from the same controls in the footer or Account privacy area. Browser Do Not Track and Global Privacy Control signals prevent optional collection. Your preference is stored on this browser, so another browser or cleared storage may require a new choice. Already combined counts cannot be separated back into an individual's actions.

Authentication, request transport, rate limiting, security logs and essential service records are separate from optional analytics. The server necessarily receives network and authentication information to handle a request; the aggregate analytics store does not retain those fields. Disabling analytics does not disable records necessary to run and protect the service.

7. Retention and deletion

We keep active account and project information to provide the service until you remove it or request account deletion, subject to safety, legal and technical requirements. Account → Privacy lets you request deletion or an export. Confirm the emailed link within 72 hours while signed in to the relevant account. A confirmed deletion is scheduled after a 30-day grace period; you can cancel before processing begins. Processing failures require retry or support intervention and must not be represented as completed deletion.

Erasure removes owned projects and selected associated records, removes the authentication identity when configured, and replaces identifying profile fields. Some accounting, audit, moderation, feedback and request records remain; an internal account reference may remain on records needed for accounting. Removing names is not a guarantee that every retained record is anonymous. Do not assume account deletion automatically cancels an active paid subscription: manage the subscription through Billing or contact support before deleting the account.

For certain blocked sexual-content-involving-minors incidents, the service can retain an encrypted text excerpt for up to 90 days for restricted, audited safety review. Other moderation records may include hashes, labels and decisions. Legal preservation requirements may affect retention.

Export download links expire after seven days. Link expiry is not necessarily deletion of the stored archive. Large exports may be partial and identify omissions; contact support for missing information. Backups, provider records, accounting records and security logs follow separate retention and restoration procedures. The final retention schedule and backup deletion window must be confirmed before publication; no indefinite or immediate-erasure promise is made by this draft.

8. International processing and your rights

Access from another country can involve processing outside that country. Applicable safeguards, transfer agreements and any local representative requirements must be verified before offering the service in that market. Availability of a website or language is not a statement of local legal compliance.

Depending on your location and the processing involved, you may have rights to access, correct, delete or receive information, restrict processing, object, withdraw consent, or complain to a data-protection authority. Use Account → Privacy for the available self-service export/deletion paths, or contact the privacy address below for other requests, omissions, accessibility needs or a disputed decision. We may need proportionate identity verification. A self-service export is not a complete response to every type of legal access request. Applicable statutory rights and response deadlines are not reduced by the product's grace period.

9. Adults only and automated decisions

The service is for people aged 18 or older. Contact support if you believe an under-18 person has an account. Automated systems help classify content and may block a request or restrict a feature. Contact support to contest a decision; the service also provides dispute tools where available. AI output is not a professional judgment about you or another person.

10. Changes and contact

We publish versioned notices and notify you of material changes through the service. An updated notice does not retroactively create consent for an unrelated purpose. Use the contact details below for privacy requests and complaints. The cookie notice describes browser storage, and the Terms and AI-content disclosure describe use of the service.