Privacy Policy

Last Updated: November 21, 2025

1. Introduction

How To Write a Synopsis ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services. This policy complies with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Information We Collect

2.1 Personal Information

We collect the following personal information when you use our services:

  • Email address (required for saving your synopsis and sending purchase confirmations)
  • Payment information (processed securely through Stripe; we do not store credit card details)
  • Story content (protagonist name, role, goal, stakes, inciting incident, climax, and other narrative elements you provide)

2.2 Automatically Collected Information

When you visit our website, we automatically collect:

  • IP address and browser type
  • Device information and operating system
  • Pages visited and time spent on our site
  • Referring website addresses

3. How We Use Your Information

We use your information for the following purposes:

  • To generate your personalized synopsis and query letter
  • To process payments and send purchase confirmations
  • To save your progress and allow you to access your content
  • To send you the final synopsis and query letter files after purchase
  • To improve our services and user experience
  • To comply with legal obligations and prevent fraud
  • To send marketing emails (only with your explicit consent; you can unsubscribe anytime)

4. Legal Basis for Processing (GDPR)

Under GDPR, we process your personal data based on the following legal grounds:

  • Contract Performance: Processing necessary to provide our synopsis generation services
  • Legitimate Interest: Improving our services and preventing fraud
  • Consent: Marketing communications (you can withdraw consent at any time)
  • Legal Obligation: Compliance with tax and financial regulations

5. Data Sharing and Third Parties

We do not sell your personal information. We share your data only with the following trusted third parties:

  • Stripe: Payment processing (subject to Stripe's privacy policy)
  • OpenAI: AI synopsis generation (your story content is processed to generate your synopsis)
  • EmailOctopus: Email marketing platform (only if you opt in to our mailing list)
  • Cloud hosting providers: Secure data storage and website hosting

6. Your Rights Under GDPR

If you are located in the European Economic Area (EEA), you have the following rights:

  • Right to Access: Request a copy of your personal data
  • Right to Rectification: Correct inaccurate or incomplete data
  • Right to Erasure: Request deletion of your personal data ("right to be forgotten")
  • Right to Restrict Processing: Limit how we use your data
  • Right to Data Portability: Receive your data in a machine-readable format
  • Right to Object: Object to processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw consent for marketing communications at any time

To exercise any of these rights, please contact us at [email protected].

7. Data Retention

We retain your personal data for as long as necessary to provide our services and comply with legal obligations. Specifically:

  • Story content and generated synopses: Stored indefinitely unless you request deletion
  • Payment records: Retained for 7 years for tax and legal compliance
  • Email addresses: Retained until you unsubscribe from our mailing list or request deletion

8. Cookies and Tracking

We use cookies and similar tracking technologies to improve your experience. You can control cookies through your browser settings. Disabling cookies may affect website functionality.

9. Data Security

We implement industry-standard security measures to protect your data, including encryption, secure servers, and access controls. However, no method of transmission over the internet is 100% secure.

10. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.

11. International Data Transfers

Your data may be transferred to and processed in countries outside the EEA. We ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated "Last Updated" date.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at:

Email: [email protected]