Privacy Policy
Last updated 2026-10-14. This policy explains what personal data ShadowPress collects, why, who receives it, and the choices you have.
Controller
The data controller is Your Company LLC. Contact for privacy questions: ledau2022@gmail.com.
What we collect
- Purchase data from WarriorPlus: your name, email, product, order ID and order status (sale, refund, cancellation). We never receive full card or PayPal account details.
- Account data: email, hashed password (we cannot read it), licence key, settings such as your pen name, bio and imprint, and login times.
- Your content: book ideas, planning documents and manuscripts you create.
- Your OpenRouter API key, stored encrypted and used only to send your own requests.
- Usage data: AI token counts and costs reported by OpenRouter, and basic server logs such as IP address, used for security and rate limiting.
- Support messages you send us.
Why we use it, and our legal basis
- To create your account and provide the service you bought (performance of a contract).
- To send transactional emails such as login details, upgrade confirmations, password resets and subscription notices (contract).
- To handle refunds, chargebacks, accounting and tax (legal obligation).
- To keep the service secure and prevent abuse (legitimate interests).
- To answer your support requests (contract and legitimate interests).
We do not use your content to train AI models, and we do not send marketing email unless you have agreed to receive it; every marketing email includes an unsubscribe link and our postal address.
Who receives your data
- WarriorPlus and its payment processors, such as PayPal or a card processor, to take payment.
- OpenRouter and the AI model provider you choose, which receive the prompts and book content needed to generate text. Free-model providers may log prompts. Their own privacy policies apply.
- Our hosting and email providers, which store data and deliver email on our behalf.
- Our typefaces are served from our own server, so loading a page does not send your IP address to a font provider.
- Authorities, when the law requires it.
We do not sell your personal information and we do not share it for cross-context behavioural advertising.
Cookies and similar technologies
We use one strictly necessary cookie, sp_sess, to keep you logged in and protect forms against forgery. We do not use advertising or analytics cookies. If that changes, we will update this policy and ask for consent where required.
How long we keep it
Account data and content are kept while your account exists. When you ask us to delete your account, we delete your content and profile within 30 days, except records we must keep for accounting, tax, refunds or fraud prevention, which we keep for as long as the law requires.
Security
Passwords are hashed, API keys are encrypted at rest, the site uses HTTPS, and admin access is limited. No system is perfectly secure; if a breach affects you, we will notify you and the authorities as the law requires.
Your rights
Depending on where you live, including under the GDPR, UK GDPR and California's CCPA/CPRA, you may have the right to access, correct, delete or export your data, to object to or restrict processing, and to withdraw consent. Californians may also ask what categories of personal information we collect and disclose; we do not sell or share it, and we will not discriminate against you for using your rights. Send requests through the support page or to ledau2022@gmail.com. We will verify your identity using your account email and reply within 30 days (45 days where California law allows). You may also complain to your local data protection authority.
International transfers
Our providers may process data in countries other than yours, including the United States. Where required, transfers rely on safeguards such as the European Commission's standard contractual clauses.
Children
ShadowPress is for adults aged 18 and over. Some books created with it are written for children, but the service itself is not directed to children and we do not knowingly collect personal data from anyone under 18. If you believe a child has given us data, contact us and we will delete it.
Changes
We will post any change here with a new date, and email account holders about material changes.
Questions about this page? Contact support or email ledau2022@gmail.com.