1. Operator and contact
Inkinerary Writing Studio is the service name. Its creator uses the writing alias Monike de Motas (MDM). The operator's legal identity and any applicable business-contact disclosures are still being confirmed. Send privacy questions to support@draftingsuite.com. This draft has not been finalized for customer launch.
2. Information used by the service
Account information includes your email address, authentication user identifier, and session information. Story data includes project names, genre, audience, language, premise, notes, chapters, text, and update times. Account storage also keeps Stripe customer identifiers and monthly AI usage counters.
Sign-in protection uses hashed email and IP-based identifiers with attempt counts. A hash is not a promise of anonymity. Hosting, authentication, email, payment, and AI providers may also process technical information, such as IP addresses, browser details, request times, and security logs, when providing their services.
If you contact support, the operator receives what you include in the email. Avoid including sensitive story content or personal information unless necessary to resolve your request.
3. Device storage and account synchronization
Inkinerary Writing Studio stores draft projects in your browser's local storage. Signed-in projects can also be saved to the hosted account database. Local draft storage is separated by email label, but this is not a substitute for a secure device account and does not make local files encrypted or inaccessible to other users of your browser.
Sign-in uses session cookies. The app sets authentication cookies as Secure, HttpOnly, and SameSite=Lax. This code does not include an advertising tracker or separate third-party analytics SDK; hosting and provider logging are distinct from that statement.
Signing out does not erase locally saved drafts. Clearing browser storage can erase those drafts. Export a backup before clearing data or changing devices.
4. AI requests and story context
When you ask the writing partner for help, Inkinerary Writing Studio sends your request and selected context to OpenAI through its API. Context can include the title, genre, audience, language, premise, notes, portions of the manuscript, and the current chapter. A grammar or continuity request also uses this AI connection.
The app requests store:false for AI responses. That setting does not mean that no provider security or abuse-monitoring records exist, and it is not a guarantee of zero retention. Provider terms, account settings, and applicable data processing arrangements need to be reviewed before launch. Do not submit information that you are not authorized to share with an AI provider.
The current app does not save AI suggestion history to a dedicated server table. Suggestions that you add to a chapter or story plan become part of the project and are saved like other writing.
5. Providers and purposes
Cloudflare hosts the app and its D1 account database. Supabase handles identity and sign-in. Brevo is the configured email delivery provider for authentication messages. OpenAI processes writing-assistance requests. Stripe processes checkout, subscriptions, invoices, payment methods, and customer portal requests. Support email is handled through the operator's email service.
Payment details are entered on Stripe-hosted pages. Inkinerary Writing Studio's own account database does not store full card numbers or card security codes. The providers operate under their own agreements and may process information in countries other than yours. Applicable transfer arrangements and provider retention settings still need review.
6. Retention and deletion
The current implementation keeps account projects until they are deleted through the project controls. It has no automatic project expiry or complete self-service account-deletion workflow. Cancellation stops subscription renewal; it does not delete projects or identity records.
Deleting a project removes its active account record and updates that browser's draft list after success. It does not guarantee erasure from other devices, exports, provider logs, or backups. Another device with an older draft may still have a copy and can synchronize it again. Authentication rate-limit records older than a day are cleaned up during later sign-in attempts, rather than by a guaranteed background deletion schedule.
The operator must finalize retention periods, backup deletion, billing-record retention, and a verified account-deletion process before launch. No fixed deletion deadline is promised by this draft. Email support with a data request; eligibility and responses depend on applicable law and identity verification.
7. Security and your choices
The app separates account-owned projects, checks authenticated requests on the server, limits AI usage, and encrypts saved owner connection credentials. These controls do not establish end-to-end encryption of manuscripts or guarantee that unauthorized access can never occur.
You can write without signing in using device storage, export your writing, delete individual projects, choose not to submit an AI request, and contact support about account or privacy concerns. Some provider processing is necessary to use account, AI, or paid features.
Proposed launch policy is adults only, pending owner confirmation. The final notice must reflect the approved audience, legal operator, supported regions, privacy rights, and actual retention and deletion procedures. This draft is not a certification of legal compliance.