Privacy Notice
Last updated: 14 August 2026
1. Who we are
ptr.services is operated by De Soto Creations ("we", "us"). We are the data controller for the personal data described in this notice. Contact us at privacy@ptr.services.
2. Data we collect and why
- Account data (email address, login credentials managed by our auth provider, display name, pen name, optional author portrait) — to create and secure your account and to render your public author page. Legal basis: performance of our contract with you.
- Content you create (book setup, outlines, chapters, prompts, art briefs, generated text and images) — to provide the writing studio and store your work. Legal basis: performance of our contract.
- Usage and telemetry (actions taken, credit ledger entries, model used, error reports, device and browser information, IP address) — to operate the service, bill credits accurately, prevent fraud and abuse, and improve the product. Legal basis: legitimate interests and legal obligation.
- Support messages — to answer your questions. Legal basis: legitimate interests.
- Marketing emails, only if you opt in — legal basis: consent, which you can withdraw at any time.
Payment card details are collected and processed by Paddle, not by us; we never see your full card data.
3. Who we share data with
- Service providers / subprocessors: cloud hosting and database, file storage, authentication, email delivery, error monitoring, and the AI model providers that process the prompts you submit.
- Merchant of Record: Paddle.com, for the sale of the product, subscription management, payments, tax compliance and invoicing.
- Professional advisers (legal, accounting) where necessary.
- Authorities where we are required to disclose by law.
We do not sell your personal data, and we do not use your book content to train our own models.
4. International transfers
Some providers are located outside the UK/EEA. Where data is transferred internationally we rely on adequacy decisions or Standard Contractual Clauses together with appropriate technical safeguards.
5. Retention
We keep account and content data for as long as your account is active. If you delete your account, your books, files and profile are deleted or anonymised, normally within 30 days, except records we must keep for legal, tax or fraud-prevention purposes.
6. Your rights
Subject to applicable law you may request access, rectification, erasure, restriction, portability, object to processing based on legitimate interests, and withdraw consent. You can also complain to your data protection supervisory authority. Email privacy@ptr.services and we will respond within one month.
7. Security
We use appropriate technical and organisational measures, including encryption in transit, row-level access controls scoped to your account, private file storage with signed URLs, and least-privilege access for staff.
8. Cookies and local storage
We use strictly necessary cookies and browser storage to keep you signed in and to remember interface preferences. We do not use advertising cookies. You can clear or block storage in your browser settings, though this will sign you out.
9. Changes
We will update this notice when our practices change and will revise the date above.
See also our Terms & Conditions and Refund Policy.