Privacy Policy

To provide and improve the Service, we collect the following information, limited to what is minimally necessary:

• Account information: email address, username, login credentials (passwords are stored as one-way hashes), avatar (optional).
• Creative content: the novel text, chapter blueprints, story-bible entries, knowledge graphs, conversation records and similar material you create in the Service.
• Usage logs: number of AI calls, credit deduction records, feature usage statistics, client crash reports.
• Device and network information: browser type and version, operating system, IP address, Referer, screen resolution; used only for security and risk control and for usability analysis.
• Payment information: payment order number, subscription plan and transaction time. We do not store any payment passwords or bank card numbers (these are handled by third-party payment institutions with the required licences).

We use your information only for the following purposes:

• To deliver the core functions of the Service to you (AI generation, content storage, search, collaboration).
• Account management, subscription billing, credit settlement and invoicing.
• Security and risk control, detection of abnormal logins, prevention of abuse and DDoS defence.
• Customer service, technical support and troubleshooting.
• Product improvement and statistical analysis, on a de-identified and aggregated basis.

Our commitment: your creative content is used only to deliver AI generation and storage to you personally. It will never be used to train our own or any third party’s large models unless you give separate, explicit consent.

We do not share your personal information with third parties except in the following cases:

• AI model providers: OpenAI, Anthropic, Google, Alibaba Tongyi, DeepSeek, Zhipu Qingyan and others. We send a model provider only the minimum context needed to complete a single generation; under each provider’s latest policy, submitted content is not used for its model training by default.
• Payment providers: Alipay, WeChat Pay and other third-party institutions holding a Payment Business Licence, used to complete subscriptions and credit purchases.
• Infrastructure providers: cloud vendors such as Tencent Cloud and Alibaba Cloud, used for data storage, computing and CDN delivery.
• Compliance and law enforcement: where laws and regulations or a competent authority lawfully require it, we will cooperate in accordance with the law and disclose only to the minimum extent necessary.

All of the third-party providers above have signed written agreements with the Company and bear confidentiality and security obligations consistent with, or stricter than, this policy.

Your personal information is, in principle, stored on cloud nodes within the People’s Republic of China. When you choose to use an overseas AI model service (such as OpenAI, Anthropic or Google), the content of the relevant request may leave mainland China when it is sent to that provider. We reduce the risk of cross-border transfer through encrypted transmission, the principle of minimum necessity and contractual terms, and handle it in compliance with the Personal Information Protection Law and the Measures for Security Assessment of Outbound Data Transfers.

We protect your information with security practices that are standard in the industry:

• Mandatory encrypted transmission over HTTPS / TLS 1.2+ across the whole site.
• Tiered database access control, log auditing and least privilege.
• Key credentials (passwords, tokens) are stored as one-way hashes or in encrypted form.
• Regular vulnerability scanning, third-party security audits and penetration tests.
• Least-privilege access for staff, operation logging and two-person review in critical scenarios.

Under applicable laws such as the Personal Information Protection Law and the GDPR, you have the following rights over your personal information:

• Access, copy and transfer your account and creative data.
• Correct inaccurate personal information (done by yourself in account settings).
• Delete your account and all creative data (irreversible; please act with care).
• Withdraw your earlier consent or object to specific data processing.
• Appeal against the result of automated decision-making and request human review.

To exercise these rights, please email postmaster@maliangwriter.com; we will verify and respond within 15 working days.

We use technologies such as cookies and LocalStorage in the browser to keep you signed in, remember interface preferences and collect anonymous usage statistics. You can manage or clear cookies in your browser settings, but some features (such as long-lived sign-in) may be limited as a result.

The Service is intended for users aged 16 and over. Minors under 16 should use it with the accompaniment and consent of a guardian. A guardian who finds that a minor has used the Service without authorisation may contact postmaster@maliangwriter.com at any time to request account closure and data deletion.

This policy may be updated from time to time; for major changes we will notify you through on-site announcements, email or pop-ups. The latest version is always published at https://maliangwriter.com/privacy/.

If you have questions about this policy, please contact us as follows:

• Data controller: 上海欧克安文化传媒有限公司
• Unified Social Credit Code: 91310113MAEK3MT877
• Registered address: 上海市宝山区市一路 199 号 1-4 楼
• Email: postmaster@maliangwriter.com
• Online chat on QQ: 1062403092