Privacy

This notice says what Saga Studio stores about you, why, and who else sees it. The data controller is MD Solutions, the trading name of Matthew Day, 220 Green Lanes, London N13 5UD. Contact: support@sagastudio.ink.

What we store, and why

• Your account: your email address, your name, when you signed in, and your settings. We use these to sign you in and run your account, because that is our contract with you.
• Your work: your manuscripts, your bible, your maps, timelines and pictures. We store these to provide the studio to you (our contract). We do not read them unless you report a result or ask us for help with them, we do not train anything on them, and we share them only with the services below that run the features you ask for. An email address is needed to have an account.
• Billing: your plan, credit balance, a record of each credit granted or spent, and when you confirmed the no-refund terms. Stripe holds your card details and payment history; we store only a Stripe customer reference. We keep these for our contract and because tax law requires it.
• Messages you send us: feedback, reports of a broken result, and emails to our support address, so we can answer and put things right (our legitimate interest in helping you). We keep them while your account is open, or for up to two years for emails from people without one.
• The waiting list: if you join it, your email address and the page you joined from, so we can tell you when sign-up opens. You asked us to (your consent), and you can withdraw it at any time: ask us and we will remove it. We delete the list once sign-up has opened and everyone on it has been told.
• Security and service logs: your IP address, browser details and technical details of requests, to keep the studio running, keep your sign-in safe, check you are not a robot, stop abuse and limit how often forms can be used. This is in our legitimate interest in a safe, working service. We keep them for up to 30 days. Logs never contain your manuscript.

We do not make decisions about you by automated means that have legal or similarly significant effects. The studio is not for anyone under 18.

Who processes it for us

Each of these handles data only to provide the service, under a contract with us and their own privacy commitments:

• Vercel hosts the studio and stores generated and uploaded pictures in a private store.
• Neon hosts the database that holds your account and your work.
• Stripe takes payments and holds card details. We never see your card number.
• Resend sends your sign-in emails.
• Cloudflare runs the check that you are not a robot when you sign in or join the waiting list. It looks at technical signals from your browser for that check only, and does not track you across other sites.
• ImprovMX passes emails sent to our support address on to our own inbox.
• Anthropic runs the model that reads your chapters. When you press an AI read or a continuity check, that chapter (and the facts it is checked against, and your notes if you allow it) is sent to Anthropic to produce suggestions. Nothing is sent unless you ask, and Settings › AI lets you choose, for each series, what the AI may read, or switch it off entirely. Anthropic’s terms for this kind of use do not let it train its models on what we send.
• Google runs the model that paints pictures. When you ask for a picture, a description built from your bible’s facts, the reference pictures you pick and any instruction you type (never your manuscript) is sent to Google. Google’s terms for paid use do not let it use what we send to improve its products.

Some of these services store or handle data outside the UK, including in the United States. Where they do, the transfer is protected by the UK’s adequacy rules (such as the UK–US data bridge) or by the standard contract terms the UK approves.

What we do not do

We do not sell or share your data for advertising. We do not use your writing to train AI models. We do not use analytics or tracking, and we do not track you across other sites. The studio sets only the cookies it needs to keep you signed in and remember your preferences, so it does not ask for cookie consent.

Keeping it safe

Data is encrypted in transit and stored with providers that encrypt it at rest. Sign-in uses one-time links that expire in ten minutes, and only a fingerprint of each link is stored. Access to the service is limited to the people who run it.

How long we keep it

For as long as you have an account. Delete it in Settings › Account, or ask us to, and your work and account are removed within 30 days; we keep only a coded fingerprint of your email address (not the address itself) so welcome credits are given once per person; payment records are kept for the period tax law requires (currently six years in the UK). Logs are kept for up to 30 days, and backups age out within 30 days after deletion.

Your rights

You can export your bible and manuscript at any time from Settings › Export. You can also ask us to give you a copy of what we hold about you, to correct it, to delete it, to restrict or object to how we use it, or to give it to you in a portable format. Write to us through support@sagastudio.ink; we answer within one month. If you are in the UK or EU you can also complain to your data protection regulator (in the UK, the Information Commissioner’s Office, ico.org.uk), though we would like the chance to put things right first.

Changes

The date at the top shows the current version. We will email you about material changes. See also our terms of service.