Last Updated: March 2026
PRIVACY POLICY
Effective Date: March 23, 2026
Last Updated: March 2026
OPERATOR:
Aurelis LLC, DBA Quill & Current™
ADDRESS:
Aurelis LLC
2108 N ST STE N, Sacramento, CA 95816, United States
Website: www.quillcurrent.com
Email: support@quillcurrent.com
EU/EEA Data Protection Contact: privacy@quillcurrent.com
California Privacy Inquiries: privacy@quillcurrent.com
Applies to: Web application and all versions of Quill & Current™.
1) Scope and Operator Identification
This Privacy Policy describes how Aurelis LLC, DBA Quill & Current™ ("we," "us") collects, uses, and discloses personal information when you use our creative writing platform. (CalOPPA, Cal. Bus. & Prof. Code § 22575.)
Account Information: Name, email address, password (hashed)Payment Information: Processed securely by Stripe; we do not store full card numbersContent: Stories, projects, and creative works you createCommunications: Support requests, feedback, correspondenceUsage Data: Features used, pages viewed, session durationDevice Information: Browser type, operating system, device identifiersNetwork Data: IP address (used for approximate location, NOT precise GPS)Cookies: Essential session cookies (see Cookie Policy)OAuth Providers: If you sign in with Google, we receive your name and emailPayment Processor: Transaction status from Stripe3) Data Retention Periods
Account data: Duration of account + 30 days after deletionYour creative content: Until you delete it or account closure + 30 daysUsage analytics (aggregated): 24 monthsSession logs: 90 daysIP addresses in server logs: 90 days (automatically purged)Support communications: 3 yearsLegal/compliance records: As required by lawCookies: Session or 12-24 months (see Cookie Policy)Providing the Service: Process your content, generate AI outputs, store your projectsAccount Management: Authentication, subscription managementPayment Processing: Process subscriptions and purchases via StripeCommunications: Respond to support requests, send service updatesImprovement: Analyze usage patterns to improve features (aggregated/anonymized)Legal Compliance: Comply with laws, respond to legal requestsSecurity: Detect and prevent fraud, abuse, and security threats5) AI and Your Content
IMPORTANT:
We do NOT use your specific creative content to train AI modelsYour stories, novels, and projects are YOUR propertyAI processing occurs only to provide real-time assistanceWe may use anonymized, aggregated usage patterns for service improvement6) Do Not Track / Global Privacy Control
We HONOR Do Not Track (DNT) and Global Privacy Control (GPC) signals. When detected:
No non-essential cookies without explicit consentNo cross-site trackingAnalytics limited to essential service operation7) Cookies and Similar Technologies
See our Cookie Policy for full details. Summary:
Essential cookies: Required for login and security (cannot be disabled)Preference cookies: Remember your settings (theme, language)We do NOT use: Advertising cookies, cross-site tracking, or sell cookie data8) Legal Bases for Processing (GDPR - EU/EEA/UK)
Under GDPR Article 6(1), we process data based on:
Consent: Where you have given explicit consentContract: Necessary to provide the Service you requestedLegal Obligation: Compliance with applicable lawsLegitimate Interests: Service improvement, security, fraud preventionYou may withdraw consent at any time by contacting us.
9) Your California Privacy Rights (CCPA/CPRA)
California residents have these rights:
Right to Know: What data we collect and how we use itRight to Access: Obtain a copy of your personal informationRight to Delete: Request deletion of your personal informationRight to Correct: Request correction of inaccurate informationRight to Opt-Out of Sale/Sharing: WE DO NOT SELL YOUR DATARight to Limit Sensitive Information Use: We collect minimal sensitive dataRight to Non-Discrimination: We will not penalize you for exercising rightsDO NOT SELL OR SHARE MY PERSONAL INFORMATION:
We do NOT sell your personal information.
We do NOT share for cross-context behavioral advertising.
Exercise Your Rights:
Email: privacy@quillcurrent.com
In-app: Settings > Data Management
Response time: 45 days (may extend to 90 days with notice)
10) Data Subject Rights (GDPR - EU/EEA/UK)
EU/EEA/UK residents have these rights:
Access: Obtain confirmation and copies of your dataRectification: Correct inaccurate dataErasure ("Right to be Forgotten"): Delete your dataRestriction: Limit how we process your dataPortability: Receive your data in machine-readable formatObjection: Object to processing based on legitimate interestsAutomated Decision Review: We do not make solely automated decisions with legal effectsWithdraw Consent: At any timeResponse time: 1 month (may extend to 3 months for complex requests)
Complaints: You may file with your local Data Protection Authority (GDPR Art. 77-79)
Email: privacy@quillcurrent.com
Mail: 2108 N ST STE N, Sacramento, CA 95816, United States
We do NOT intentionally collect sensitive personal information including:
Social Security numbersFinancial account numbers (payment processed by Stripe)Precise geolocation (we only use approximate location from IP)Biometric dataHealth informationRacial or ethnic originPolitical opinionsReligious beliefs13) Data Security
We implement reasonable security measures including:
Encryption: TLS/SSL for data in transit, encryption at restAccess Controls: Role-based access, authentication requiredPassword Security: Bcrypt hashing, no plaintext storageSecurity Monitoring: Sentry error tracking, audit logsRegular Assessments: Periodic security reviewsNo method is 100% secure. We cannot guarantee absolute security.
14) Data Breach Notification
California (Cal. Civ. Code § 1798.82):
Expedient notification including breach date, categories compromised, contact info.
EU/EEA/UK (GDPR Art. 33-34):
Supervisory authority notified within 72 hours; affected individuals notified without undue delay if high risk.
15) Data Sharing
We do NOT sell your personal information. We may share data with:
Service Providers: Hosting (secure cloud), payment processing (Stripe), email (Postmark), voice generation (ElevenLabs), error tracking (Sentry)Legal Requirements: Court orders, legal process, government requestsBusiness Transfers: In connection with merger, acquisition, or asset sale (successor bound by this Policy)With Your Consent: When you explicitly authorize sharing15A) AI Processing Disclosure
When you use our AI writing features, portions of your input text may be sent to third-party AI providers for processing:
OpenAI (GPT models): Used for text generation, analysis, and image generation. OpenAI's data usage policy applies. We use the API with data retention disabled where available.Google (Gemini models): Used for text generation and image generation. Google Cloud's AI data processing terms apply.Important:
We do NOT use your creative content to train our own AI models or any third-party modelsAI providers process your data solely to generate responses and do not retain it for training (per our API agreements)You should not input highly sensitive personal information (SSNs, financial account numbers) into AI featuresAll AI-generated content passes through our output filtering before delivery16) International Transfers
Data may be transferred to and processed in the United States.
EU/EEA/UK: We use Standard Contractual Clauses (SCCs) or other lawful transfer mechanisms to ensure adequate protection.
17) Children's Privacy
Quill & Current™ is NOT intended for children under 13. We do NOT knowingly collect information from children under 13 (COPPA).
Users 13-17 require parental consent. If we learn we have collected information from a child under 13, we will delete it promptly.
Parents: Contact privacy@quillcurrent.com if you believe your child has provided information without consent.
18) "Shine the Light" Law (Cal. Civ. Code § 1798.83)
We do NOT share personal information with third parties for their direct marketing purposes.
19) Changes to This Policy
We may update this Policy periodically. Changes include a new effective date. Material changes will be notified via email or in-app notice.
Continued use after changes constitutes acceptance.
20) Regional Privacy Supplements
If you are a resident of the Republic of Korea, the following additional provisions apply:
Data Controller: Aurelis LLC is the data controller for your personal informationPurpose of Processing: We process personal information for the purposes described in Section 4 (Information We Collect) and Section 5 (How We Use Your Information)Retention Period: We retain your personal information for the duration of your account and for a reasonable period thereafter as required by applicable Korean lawThird-Party Disclosures: We disclose personal information to third parties only as described in Section 10 (Third-Party Services & Sharing)Overseas Transfers: Your personal information may be transferred to the United States as described in Section 16 (International Transfers). Such transfers are conducted in compliance with PIPA requirementsYour Rights Under PIPA: You have the right to access, correct, suspend processing of, and request deletion of your personal information. Exercise these rights via Settings > Account > Data Management or by contacting privacy@quillcurrent.comData Protection Officer: Contact our privacy team at privacy@quillcurrent.com for PIPA-related inquiriesIf you are a resident of Japan, the following additional provisions apply:
Business Operator: Aurelis LLC acts as the business operator handling your personal information under APPIPurpose of Use: Your personal information is used for the specific purposes stated in Section 5 of this PolicyJoint Use: We do not jointly use your personal information with other businesses except as disclosed in Section 10Overseas Transfer: Your personal information is transferred to the United States for processing. We ensure appropriate safeguards as required by APPI Article 28Your Rights Under APPI: You have the right to request disclosure, correction, suspension of use, and deletion of your personal information. Submit requests to privacy@quillcurrent.comRetained Personal Data: We manage retained personal data in accordance with APPI requirements and will respond to disclosure requests within the statutory period20.3) Thailand — Personal Data Protection Act (PDPA)
If you are a resident of Thailand, the following additional provisions apply:
Data Controller: Aurelis LLC is the data controller under the PDPALegal Bases: We process your personal data based on consent, contractual necessity, legitimate interests, and legal obligations as described in this PolicyCross-Border Transfers: Your personal data is transferred to the United States. We ensure adequate protection standards as required by the PDPAYour Rights Under PDPA: You have the right to access, correct, delete, restrict, object to processing, and request portability of your personal data. Contact privacy@quillcurrent.comSensitive Data: We do not intentionally collect sensitive personal data (race, religion, health, biometric data) unless explicitly provided by you in your creative contentData Protection Officer: Contact privacy@quillcurrent.com for PDPA-related inquiries20.4) Brazil — Lei Geral de Protecao de Dados (LGPD)
If you are a resident of Brazil, the following additional provisions apply:
Controller: Aurelis LLC is the controller of your personal data under the LGPDLegal Bases for Processing: We process personal data based on: (i) consent; (ii) performance of a contract; (iii) legitimate interests; (iv) legal obligationsInternational Transfers: Your personal data is transferred to the United States. We implement appropriate safeguards including Standard Contractual ClausesYour Rights Under LGPD: You have the right to confirmation of processing, access, correction, anonymization, portability, deletion, information about sharing, information about consent denial, and consent revocationData Protection Officer (DPO): Contact privacy@quillcurrent.com for LGPD-related inquiriesNational Data Protection Authority (ANPD): You may file complaints with the ANPD at https://www.gov.br/anpd21) Accessing, Correcting, Deleting Your Data
In-app: Settings > Account > Data Management
Email: privacy@quillcurrent.com
Response times:
California: 45 days (may extend to 90)EU/EEA/UK: 1 month (may extend to 3)Korea (PIPA): 10 daysJapan (APPI): Without delayThailand (PDPA): 30 daysBrazil (LGPD): 15 daysOthers: 30 daysAppeals: Email privacy@quillcurrent.com with subject "Privacy Appeal"
22) Governing Language
The English-language version of this Privacy Policy is the sole official and legally binding version. Any translations are provided for informational convenience only and are not legally binding. In the event of any conflict between the English version and any translated version, the English-language version shall prevail and control.
OPERATOR:
Aurelis LLC, DBA Quill & Current™
ADDRESS:
2108 N ST STE N, Sacramento, CA 95816, United States
Website: www.quillcurrent.com
Email: support@quillcurrent.com
Privacy: privacy@quillcurrent.com
CA complaints: California Privacy Protection Agency
EU complaints: Your local Data Protection Authority
Korea complaints: Personal Information Protection Commission (PIPC)
Japan complaints: Personal Information Protection Commission (PPC)
Thailand complaints: Office of the Personal Data Protection Committee
Brazil complaints: Autoridade Nacional de Protecao de Dados (ANPD)
© 2026 Aurelis LLC, DBA Quill & Current™. All rights reserved.