Skip to main content
Back to home

Last Updated: March 2026

PRIVACY POLICY

Effective Date: March 23, 2026

Last Updated: March 2026

OPERATOR:

Aurelis LLC, DBA Quill & Current™

ADDRESS:

Aurelis LLC

2108 N ST STE N, Sacramento, CA 95816, United States

Website: www.quillcurrent.com

Email: support@quillcurrent.com

EU/EEA Data Protection Contact: privacy@quillcurrent.com

California Privacy Inquiries: privacy@quillcurrent.com

Applies to: Web application and all versions of Quill & Current™.

1) Scope and Operator Identification

This Privacy Policy describes how Aurelis LLC, DBA Quill & Current™ ("we," "us") collects, uses, and discloses personal information when you use our creative writing platform. (CalOPPA, Cal. Bus. & Prof. Code § 22575.)

2) Categories of Personal Information We Collect

Information You Provide:

  • Account Information: Name, email address, password (hashed)
  • Payment Information: Processed securely by Stripe; we do not store full card numbers
  • Content: Stories, projects, and creative works you create
  • Communications: Support requests, feedback, correspondence
  • Information Collected Automatically:

  • Usage Data: Features used, pages viewed, session duration
  • Device Information: Browser type, operating system, device identifiers
  • Network Data: IP address (used for approximate location, NOT precise GPS)
  • Cookies: Essential session cookies (see Cookie Policy)
  • Information from Third Parties:

  • OAuth Providers: If you sign in with Google, we receive your name and email
  • Payment Processor: Transaction status from Stripe
  • 3) Data Retention Periods

  • Account data: Duration of account + 30 days after deletion
  • Your creative content: Until you delete it or account closure + 30 days
  • Usage analytics (aggregated): 24 months
  • Session logs: 90 days
  • IP addresses in server logs: 90 days (automatically purged)
  • Support communications: 3 years
  • Legal/compliance records: As required by law
  • Cookies: Session or 12-24 months (see Cookie Policy)
  • 4) How We Use Your Information

  • Providing the Service: Process your content, generate AI outputs, store your projects
  • Account Management: Authentication, subscription management
  • Payment Processing: Process subscriptions and purchases via Stripe
  • Communications: Respond to support requests, send service updates
  • Improvement: Analyze usage patterns to improve features (aggregated/anonymized)
  • Legal Compliance: Comply with laws, respond to legal requests
  • Security: Detect and prevent fraud, abuse, and security threats
  • 5) AI and Your Content

    IMPORTANT:

  • We do NOT use your specific creative content to train AI models
  • Your stories, novels, and projects are YOUR property
  • AI processing occurs only to provide real-time assistance
  • We may use anonymized, aggregated usage patterns for service improvement
  • 6) Do Not Track / Global Privacy Control

    We HONOR Do Not Track (DNT) and Global Privacy Control (GPC) signals. When detected:

  • No non-essential cookies without explicit consent
  • No cross-site tracking
  • Analytics limited to essential service operation
  • 7) Cookies and Similar Technologies

    See our Cookie Policy for full details. Summary:

  • Essential cookies: Required for login and security (cannot be disabled)
  • Preference cookies: Remember your settings (theme, language)
  • We do NOT use: Advertising cookies, cross-site tracking, or sell cookie data
  • Under GDPR Article 6(1), we process data based on:

  • Consent: Where you have given explicit consent
  • Contract: Necessary to provide the Service you requested
  • Legal Obligation: Compliance with applicable laws
  • Legitimate Interests: Service improvement, security, fraud prevention
  • You may withdraw consent at any time by contacting us.

    9) Your California Privacy Rights (CCPA/CPRA)

    California residents have these rights:

  • Right to Know: What data we collect and how we use it
  • Right to Access: Obtain a copy of your personal information
  • Right to Delete: Request deletion of your personal information
  • Right to Correct: Request correction of inaccurate information
  • Right to Opt-Out of Sale/Sharing: WE DO NOT SELL YOUR DATA
  • Right to Limit Sensitive Information Use: We collect minimal sensitive data
  • Right to Non-Discrimination: We will not penalize you for exercising rights
  • DO NOT SELL OR SHARE MY PERSONAL INFORMATION:

    We do NOT sell your personal information.

    We do NOT share for cross-context behavioral advertising.

    Exercise Your Rights:

    Email: privacy@quillcurrent.com

    In-app: Settings > Data Management

    Response time: 45 days (may extend to 90 days with notice)

    10) Data Subject Rights (GDPR - EU/EEA/UK)

    EU/EEA/UK residents have these rights:

  • Access: Obtain confirmation and copies of your data
  • Rectification: Correct inaccurate data
  • Erasure ("Right to be Forgotten"): Delete your data
  • Restriction: Limit how we process your data
  • Portability: Receive your data in machine-readable format
  • Objection: Object to processing based on legitimate interests
  • Automated Decision Review: We do not make solely automated decisions with legal effects
  • Withdraw Consent: At any time
  • Response time: 1 month (may extend to 3 months for complex requests)

    Complaints: You may file with your local Data Protection Authority (GDPR Art. 77-79)

    11) EU/EEA Data Protection Contact

    Email: privacy@quillcurrent.com

    Mail: 2108 N ST STE N, Sacramento, CA 95816, United States

    12) Sensitive Personal Information

    We do NOT intentionally collect sensitive personal information including:

  • Social Security numbers
  • Financial account numbers (payment processed by Stripe)
  • Precise geolocation (we only use approximate location from IP)
  • Biometric data
  • Health information
  • Racial or ethnic origin
  • Political opinions
  • Religious beliefs
  • 13) Data Security

    We implement reasonable security measures including:

  • Encryption: TLS/SSL for data in transit, encryption at rest
  • Access Controls: Role-based access, authentication required
  • Password Security: Bcrypt hashing, no plaintext storage
  • Security Monitoring: Sentry error tracking, audit logs
  • Regular Assessments: Periodic security reviews
  • No method is 100% secure. We cannot guarantee absolute security.

    14) Data Breach Notification

    California (Cal. Civ. Code § 1798.82):

    Expedient notification including breach date, categories compromised, contact info.

    EU/EEA/UK (GDPR Art. 33-34):

    Supervisory authority notified within 72 hours; affected individuals notified without undue delay if high risk.

    15) Data Sharing

    We do NOT sell your personal information. We may share data with:

  • Service Providers: Hosting (secure cloud), payment processing (Stripe), email (Postmark), voice generation (ElevenLabs), error tracking (Sentry)
  • Legal Requirements: Court orders, legal process, government requests
  • Business Transfers: In connection with merger, acquisition, or asset sale (successor bound by this Policy)
  • With Your Consent: When you explicitly authorize sharing
  • 15A) AI Processing Disclosure

    When you use our AI writing features, portions of your input text may be sent to third-party AI providers for processing:

  • OpenAI (GPT models): Used for text generation, analysis, and image generation. OpenAI's data usage policy applies. We use the API with data retention disabled where available.
  • Google (Gemini models): Used for text generation and image generation. Google Cloud's AI data processing terms apply.
  • Important:

  • We do NOT use your creative content to train our own AI models or any third-party models
  • AI providers process your data solely to generate responses and do not retain it for training (per our API agreements)
  • You should not input highly sensitive personal information (SSNs, financial account numbers) into AI features
  • All AI-generated content passes through our output filtering before delivery
  • 16) International Transfers

    Data may be transferred to and processed in the United States.

    EU/EEA/UK: We use Standard Contractual Clauses (SCCs) or other lawful transfer mechanisms to ensure adequate protection.

    17) Children's Privacy

    Quill & Current™ is NOT intended for children under 13. We do NOT knowingly collect information from children under 13 (COPPA).

    Users 13-17 require parental consent. If we learn we have collected information from a child under 13, we will delete it promptly.

    Parents: Contact privacy@quillcurrent.com if you believe your child has provided information without consent.

    18) "Shine the Light" Law (Cal. Civ. Code § 1798.83)

    We do NOT share personal information with third parties for their direct marketing purposes.

    19) Changes to This Policy

    We may update this Policy periodically. Changes include a new effective date. Material changes will be notified via email or in-app notice.

    Continued use after changes constitutes acceptance.

    20) Regional Privacy Supplements

    20.1) Korea — Personal Information Protection Act (PIPA)

    If you are a resident of the Republic of Korea, the following additional provisions apply:

  • Data Controller: Aurelis LLC is the data controller for your personal information
  • Purpose of Processing: We process personal information for the purposes described in Section 4 (Information We Collect) and Section 5 (How We Use Your Information)
  • Retention Period: We retain your personal information for the duration of your account and for a reasonable period thereafter as required by applicable Korean law
  • Third-Party Disclosures: We disclose personal information to third parties only as described in Section 10 (Third-Party Services & Sharing)
  • Overseas Transfers: Your personal information may be transferred to the United States as described in Section 16 (International Transfers). Such transfers are conducted in compliance with PIPA requirements
  • Your Rights Under PIPA: You have the right to access, correct, suspend processing of, and request deletion of your personal information. Exercise these rights via Settings > Account > Data Management or by contacting privacy@quillcurrent.com
  • Data Protection Officer: Contact our privacy team at privacy@quillcurrent.com for PIPA-related inquiries
  • 20.2) Japan — Act on Protection of Personal Information (APPI)

    If you are a resident of Japan, the following additional provisions apply:

  • Business Operator: Aurelis LLC acts as the business operator handling your personal information under APPI
  • Purpose of Use: Your personal information is used for the specific purposes stated in Section 5 of this Policy
  • Joint Use: We do not jointly use your personal information with other businesses except as disclosed in Section 10
  • Overseas Transfer: Your personal information is transferred to the United States for processing. We ensure appropriate safeguards as required by APPI Article 28
  • Your Rights Under APPI: You have the right to request disclosure, correction, suspension of use, and deletion of your personal information. Submit requests to privacy@quillcurrent.com
  • Retained Personal Data: We manage retained personal data in accordance with APPI requirements and will respond to disclosure requests within the statutory period
  • 20.3) Thailand — Personal Data Protection Act (PDPA)

    If you are a resident of Thailand, the following additional provisions apply:

  • Data Controller: Aurelis LLC is the data controller under the PDPA
  • Legal Bases: We process your personal data based on consent, contractual necessity, legitimate interests, and legal obligations as described in this Policy
  • Cross-Border Transfers: Your personal data is transferred to the United States. We ensure adequate protection standards as required by the PDPA
  • Your Rights Under PDPA: You have the right to access, correct, delete, restrict, object to processing, and request portability of your personal data. Contact privacy@quillcurrent.com
  • Sensitive Data: We do not intentionally collect sensitive personal data (race, religion, health, biometric data) unless explicitly provided by you in your creative content
  • Data Protection Officer: Contact privacy@quillcurrent.com for PDPA-related inquiries
  • 20.4) Brazil — Lei Geral de Protecao de Dados (LGPD)

    If you are a resident of Brazil, the following additional provisions apply:

  • Controller: Aurelis LLC is the controller of your personal data under the LGPD
  • Legal Bases for Processing: We process personal data based on: (i) consent; (ii) performance of a contract; (iii) legitimate interests; (iv) legal obligations
  • International Transfers: Your personal data is transferred to the United States. We implement appropriate safeguards including Standard Contractual Clauses
  • Your Rights Under LGPD: You have the right to confirmation of processing, access, correction, anonymization, portability, deletion, information about sharing, information about consent denial, and consent revocation
  • Data Protection Officer (DPO): Contact privacy@quillcurrent.com for LGPD-related inquiries
  • National Data Protection Authority (ANPD): You may file complaints with the ANPD at https://www.gov.br/anpd
  • 21) Accessing, Correcting, Deleting Your Data

    In-app: Settings > Account > Data Management

    Email: privacy@quillcurrent.com

    Response times:

  • California: 45 days (may extend to 90)
  • EU/EEA/UK: 1 month (may extend to 3)
  • Korea (PIPA): 10 days
  • Japan (APPI): Without delay
  • Thailand (PDPA): 30 days
  • Brazil (LGPD): 15 days
  • Others: 30 days
  • Appeals: Email privacy@quillcurrent.com with subject "Privacy Appeal"

    22) Governing Language

    The English-language version of this Privacy Policy is the sole official and legally binding version. Any translations are provided for informational convenience only and are not legally binding. In the event of any conflict between the English version and any translated version, the English-language version shall prevail and control.

    23) Contact

    OPERATOR:

    Aurelis LLC, DBA Quill & Current™

    ADDRESS:

    2108 N ST STE N, Sacramento, CA 95816, United States

    Website: www.quillcurrent.com

    Email: support@quillcurrent.com

    Privacy: privacy@quillcurrent.com

    CA complaints: California Privacy Protection Agency

    EU complaints: Your local Data Protection Authority

    Korea complaints: Personal Information Protection Commission (PIPC)

    Japan complaints: Personal Information Protection Commission (PPC)

    Thailand complaints: Office of the Personal Data Protection Committee

    Brazil complaints: Autoridade Nacional de Protecao de Dados (ANPD)

    © 2026 Aurelis LLC, DBA Quill & Current™. All rights reserved.

    Install Quill & Current™

    Write anywhere, even offline

    Offline accessFaster loading