How we collect, use, and protect personal data — written plainly, in line with the GDPR.
The controller responsible for the processing of your personal data within the meaning of the EU General Data Protection Regulation (GDPR) is:
Nezir Basar (Chaptora)
Leopold-Kohr-Straße 1, 1220 Vienna, Austria
info@chaptora.com
This policy explains how we collect, use, store, and share personal data when you visit our website or use Chaptora (the “Service”), an AI-assisted writing platform for authors. It applies to data we process as a controller. It does not cover third-party websites linked from the Service.
We process the following categories of personal data:
When you use AI features in Chaptora, the relevant parts of your content (e.g. selected text, chapter context, prompts) are sent to third-party AI providers so they can return a response. We instruct these providers contractually not to use your content to train their models. Outputs are returned to you and stored in your project.
You should not paste highly sensitive personal data (e.g. health data, government identifiers, payment card numbers) into the editor. AI outputs may be inaccurate or unoriginal; you are responsible for reviewing them before use.
We rely on the following providers, which process personal data on our behalf under data processing agreements:
Some of the providers above are based outside the European Economic Area, in particular in the United States. Where data is transferred outside the EEA, we rely on appropriate safeguards under Art. 46 GDPR — in particular the European Commission’s Standard Contractual Clauses, and where applicable, the EU–U.S. Data Privacy Framework.
We use strictly necessary cookies and similar technologies to keep you signed in, remember your preferences, and protect the Service. These do not require consent under § 165 Abs. 3 TKG 2021. We do not use advertising or cross-site tracking cookies. If we introduce non-essential analytics in the future, we will ask for your consent first.
We keep your account and content for as long as your account exists. If you delete a project, chapter, or your account, we delete the corresponding data from our active systems within a reasonable period and from backups in accordance with our backup rotation. We retain data longer where required by law (e.g. seven years for accounting records under Austrian law) or to defend legal claims.
Under the GDPR, you have the right to: access your data (Art. 15), have inaccurate data corrected (Art. 16), have your data erased (Art. 17), restrict processing (Art. 18), receive your data in a portable format (Art. 20), and object to processing based on legitimate interests (Art. 21). Where processing is based on consent, you may withdraw it at any time without affecting prior processing.
To exercise these rights, contact us at info@chaptora.com. You also have the right to lodge a complaint with a supervisory authority, in particular the Austrian Data Protection Authority (www.dsb.gv.at).
We use encryption in transit (HTTPS), access controls, and reputable infrastructure providers to protect your data. No online service can be guaranteed fully secure; please use a strong, unique password and notify us of any suspected unauthorized access.
The Service is not directed to children under 16. If you believe a child has provided us with personal data, please contact us so we can delete it.
We may update this policy to reflect changes to the Service or applicable law. We will post the updated version on this page and adjust the “last revised” date. Significant changes will be communicated by email or in-app notice.
Questions about this policy or your personal data? Write to info@chaptora.com.