Privacy policy · Atypic

What this covers

This policy covers atypic.ai and Atypic’s subscription software apps, listed on the products page. Each app may also have its own privacy page with the details for that app; for Bookwright it is bookwright.diy/privacy.

What we collect

Your account: your email address, when the account was made and when you last signed in, and the sign-in sessions that keep you signed in.
Your work: what you write, upload or make in an app, such as a book’s text, notes and pictures. It is yours, and we keep it only to run the app for you.
Your keys: if you give an app a key for an AI provider, it is stored encrypted and used only to call that provider for you.
Your plan: which plan you’re on, whether it is active, and when it renews or ends. Stripe tells us this; we never see or store your full card number.
What you send us: the emails you write to us, and what is in them.
Visits: we count visits to our sites with privacy-friendly analytics that set no cookies and don’t identify you. Our host keeps ordinary request logs for a short time.

Payments: Stripe and Link

Paid plans are processed and sold through Link. Sold through Link, LLC, an affiliate of Stripe, is the merchant of record. When you buy, you enter your payment details on Stripe’s checkout page, over an encrypted (HTTPS) connection, and Stripe and Link handle them. Stripe is certified to PCI DSS Level 1, the highest level for card payments. They use your details to take the payment, work out tax, prevent fraud and send your receipts, under Link’s privacy policy and Stripe’s privacy policy. Atypic receives what it needs to run your plan, such as your email, your country, the plan and the payment’s status, and never your full card number.

How we use it

to run the apps: sign you in, keep your work, and give you your plan;
to answer you when you write to us, and help with your account;
to tell you about your account: sign-in codes, changes to your plan, and changes to our terms or prices;
to keep the apps secure and stop abuse;
to meet our legal and tax obligations.

We don’t sell your personal information, share it for advertising, or use your work to train AI models. We send marketing email only if you ask for it.

We use a few service providers, each only for its part of the job and under its own privacy commitments:

Vercel hosts our sites and apps, in the United States;
Supabase and Upstash store our databases, in the United States;
Resend sends our emails, and Google Workspace holds our inbox;
Stripe and Link take payments, as described above;
the AI provider you choose in an app receives what the app sends it for you, under that provider’s terms.

We may also disclose information when the law requires it, or to protect people or the apps from harm.

Cookies

Our public pages, this site included, set no tracking cookies. The apps use a cookie only to keep you signed in.

How long we keep it

We keep your account and your work for as long as you have the account. When you delete it, we delete them. We keep billing records, and support emails, for as long as tax and accounting law requires, and Stripe and Link keep their own records under their policies.

Seeing, correcting and deleting your data

Delete your account yourself: in Bookwright, delete the account on your account page. It removes the account and every book at once.
Ask us: email support@atypic.ai from the address on your account to get a copy of your data, correct it, or have it deleted. We reply within 2 business days and finish within 30 days.
Payment data: to see or delete what Link holds about your purchases, contact Link through its privacy policy. Deleting your Link data cancels subscriptions bought through Link.

Depending on where you live, such as the European Union, the United Kingdom or California, the law may give you more rights over your data, including to object to how it is used or to complain to a data protection authority. Write to us and we’ll honor them.

Security

Everything travels over HTTPS. Keys and secrets are encrypted at rest, and access to our systems is limited to the people who run them. No system is perfectly secure; if a breach affects your data, we’ll tell you promptly.

Children

Our apps aren’t meant for children under 13, and we don’t knowingly collect their information. If you think a child has given us information, tell us and we’ll delete it.

Where it is processed

Atypic is based in the United States, and our providers process data mostly in the United States. Using the apps from elsewhere means your data is transferred there.

Changes

If we change this policy, we’ll update the date at the top, and email you first if the change matters to you.

Contact

Privacy questions and requests: support@atypic.ai. More ways to reach us are on the contact page.