Privacy

What Prosera keeps

• Your account: your email address and a password (stored only as a hash), or your Google account’s email if you sign in with Google.
• Your writing: novels, scenes, outlines, codex entries, snippets, chats, critiques, prompts, images you add, and your settings.
• Your AI connections: each API key you add is encrypted (AES-256-GCM) before it’s stored, and is only decrypted on the server to call that provider for you. Page scripts never see it.
• A spend log: for each AI run that goes through Prosera’s server, the model, how many tokens went in and out, and what that cost at the model’s list price, so you can see what you’re spending. Runs on your own computer aren’t logged.
• Sign-in records: when you sign in, the IP address and browser of that session, kept to keep your account secure.
• Invite requests: the email address, and the note if you write one, that you send with “Request an invite”.

Where your text goes

• To the AI provider you connect, only when you run something: a beat, a rewrite, a summary, a chat message, a critique, the codex finder. What’s sent is shown in each prompt’s preview. That provider’s own terms cover what it does with it.
• Models on your own computer (Ollama, LM Studio) are called from your browser, so that text never passes through Prosera’s servers.
• Grammar checking runs on Prosera’s own LanguageTool server, not a third-party service.
• Cloudflare carries every visit to Prosera between your browser and its server (and protects it from attacks), so your requests pass through Cloudflare’s network on the way.
• Resend sends Prosera’s emails (confirming your address, resetting your password), so it sees your email address and those messages.
• Google, only if you choose “Continue with Google”. Prosera asks Google for your name, email address and profile picture, and nothing else: no access to your Drive, Gmail or contacts.
• Feedback you send from the app is emailed to Prosera’s operator with your email address and the page you were on, so a reply can reach you. It isn’t kept in the app; the email stays in that mailbox.
• Nothing is sold, shared with advertisers, or used to train AI models, by Prosera or for anyone else.

Cookies and storage

Prosera sets only the cookies that keep you signed in. They’re http-only, so page scripts can’t read them. Your browser also keeps a few preferences (theme, panel sizes, which suggestions you’ve accepted) in its own storage. There are no analytics or advertising cookies.

Where it’s stored

Your data is stored on servers in the United States. Backups are kept for 14 days, so a mistake or a failure can be undone.

The operator can reach the database to keep Prosera running. Your writing isn’t read, except when you ask for help with something specific or the law requires it.

Your choices

• Export any novel at any time, as a Word document, an EPUB e-book or Markdown.
• Delete your account from Settings. That removes your account and everything in it straight away; backups age out on their own schedule.
• Remove an AI key by deleting its connection. Revoke it with the provider too if you like.
• Ask for a copy, a correction or deletion of anything Prosera holds about you, or have an invite request removed, by writing to [email protected]. You’ll get an answer within 30 days. If you live in the EU or the UK, you can also complain to your data protection authority.

Children

Prosera isn’t for children under 13 (16 in the EU and the UK). If you learn that a child has made an account, write to the address above and it will be deleted.

Who runs Prosera

Prosera is run by Steven Coppens. If this policy changes in a way that matters, you’ll be told in the app before it takes effect.