1. Introduction

Eros Red ("we," "us," "our") operates the website www.eros.red and the associated services (the "Service"). This Privacy Policy explains what information we collect, how we use it, and what choices you have.

By using the Service, you agree to the collection and use of information as described in this policy.

2. Information We Collect

2.1 Information You Provide

Account information. When you create an account, we collect your name, email address, and authentication credentials. Account creation is handled through a third-party authentication provider (WorkOS).
Payment information. If you subscribe to a paid plan, your payment is processed by a third-party payment provider. We do not store your full credit card number, bank account details, or other sensitive financial data on our servers. We may receive limited billing details such as the last four digits of your card and your billing address from our payment processor.
Prompts and inputs. We collect the story prompts, character descriptions, and other text you submit to generate content through the Service.
Generated content. We store the stories and character conversations the Service produces in response to your inputs.
Communications. If you contact us by email or other channels, we collect the content of those messages.

2.2 Information Collected Automatically

Usage data. We collect information about how you interact with the Service, including pages visited, features used, timestamps, and session duration.
Device and browser information. We collect your IP address, browser type, operating system, and device identifiers.
Cookies and similar technologies. We use cookies and similar tracking technologies to maintain your session, remember your preferences, and understand how the Service is used. See Section 7 for more detail.

2.3 Information from Third Parties

Authentication providers. When you sign in through a third-party authentication service, we receive basic profile information such as your name and email address.
Payment processors. Our payment processor may share limited transaction details with us, such as subscription status and billing history.

3. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve the Service.
Process your prompts and generate stories and character conversations.
Manage your account and subscriptions.
Process payments through our third-party payment provider.
Communicate with you about your account, updates to the Service, and responses to your inquiries.
Monitor and analyze usage patterns to improve the user experience.
Detect, prevent, and address technical issues, fraud, and abuse.
Enforce our Terms of Service and comply with legal obligations.

We do not sell your personal information to third parties.

4. How We Share Your Information

We may share your information in the following circumstances:

Third-party service providers. We share information with vendors who help us operate the Service, including hosting providers, authentication services, payment processors, and analytics tools. These providers are contractually required to use your information only to provide services to us and in accordance with this policy.
AI processing. Your prompts and inputs are sent to third-party AI providers to generate stories and character conversations. These providers process your inputs according to their own terms and privacy policies. We do not control how third-party AI providers handle data beyond what is specified in our agreements with them.
Public library. If you choose to publish a story to the Eros public library, that content becomes visible to other users of the Service. Your username or display name may be shown alongside your published stories.
Legal requirements. We may disclose your information if required to do so by law, or if we believe in good faith that disclosure is necessary to comply with a legal obligation, protect our rights or safety, or investigate potential violations of our Terms of Service.
Business transfers. If Eros Red is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change through a notice on the Service or by email.

5. Data Retention

We retain your account information and content for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it by law or for legitimate business purposes such as resolving disputes or enforcing our agreements.

Generated content that you have published to the public library may remain visible after account deletion unless you remove it before deleting your account.

6. Data Security

We implement reasonable technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee absolute security.

7. Cookies and Tracking

We use cookies and similar technologies for the following purposes:

Essential cookies. These are required for the Service to function, including session management and authentication.
Analytics cookies. These help us understand how users interact with the Service so we can improve it. We may use third-party analytics tools such as Google Analytics.

You can control cookie preferences through your browser settings. Disabling essential cookies may prevent certain features of the Service from working properly.

8. Your Rights and Choices

Depending on your jurisdiction, you may have some or all of the following rights regarding your personal information:

Access. You may request a copy of the personal information we hold about you.
Correction. You may request that we correct inaccurate or incomplete information.
Deletion. You may request that we delete your personal information, subject to certain legal exceptions.
Portability. You may request a copy of your data in a portable format.
Objection. You may object to certain processing of your personal information.
Withdraw consent. Where processing is based on your consent, you may withdraw that consent at any time.

To exercise any of these rights, contact us at [INSERT CONTACT EMAIL]. We will respond to your request within 30 days, or within the timeframe required by applicable law.

9. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

The right to know what personal information we collect, use, and disclose.
The right to request deletion of your personal information.
The right to opt out of the sale of your personal information. We do not sell personal information.
The right to non-discrimination for exercising your privacy rights.

To exercise these rights, contact us at privacy@eros.red

10. European Residents (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal information on the following legal bases:

Performance of a contract. To provide the Service to you and manage your account.
Legitimate interests. To improve the Service, prevent fraud, and ensure security.
Consent. Where you have given us specific consent, such as for analytics cookies.

You have the rights described in Section 8 above. You also have the right to lodge a complaint with your local data protection authority.

If we transfer your personal data outside the EEA, we will ensure appropriate safeguards are in place, such as standard contractual clauses.

11. Children's Privacy

The Service is not intended for anyone under the age of 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected information from a child under 18, we will take steps to delete that information promptly. If you believe a child under 18 has provided us with personal information, please contact us at privacy@eros.red].

12. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those third parties. We encourage you to read the privacy policies of any third-party services you visit.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the effective date. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.

14. Contact

If you have questions about this Privacy Policy or want to exercise your privacy rights, contact us at:

Email: privacy@eros.red Website: www.eros.red