Who operates this service
PlotAndCast is operated by PlotAndCast. This notice covers plotandcastai.com and the PlotAndCast website hosted at plotandcast.vercel.app. Contact admin@plotandcastai.com for privacy questions and requests.
Information we process
- Account information: your email address, username, user ID, sign-in provider, verification status, account settings, and the policy version and time recorded when you accept our Terms and Conditions. Supabase Auth handles passwords and sign-in sessions; passwords are not stored in scenario profiles.
- Story content: your prompts, messages, AI replies, scenario descriptions, cast profiles, uploaded thumbnails, selected roles, rules, and story state or memory used for continuity.
- Usage and support information: credit balances and transactions, AI token usage and estimated costs, request identifiers, timestamps, errors, moderation decisions, and information you send when requesting help.
- Technical information: hosting and authentication providers may process IP addresses, browser/device information, and request logs to deliver and secure the service.
Why we use this information
We use information to create and secure accounts, generate replies, maintain story continuity, save progress, manage credits, investigate errors and abuse, respond to support requests, and meet applicable legal obligations. Do not put passwords, API keys, payment details, or other sensitive information into a story prompt.
AI processing and service providers
Generating a reply sends the relevant prompt, recent conversation, character instructions, and story memory to our AI provider. The current production provider is xAI (Grok). These requests are processed outside your device. Provider retention and security practices also apply; see xAI’s API information.
- Supabase: authentication, account data, saved progress, credits, and operational records.
- Vercel: website hosting and server request processing.
- Resend: account verification and password-recovery emails, including your email address and the information needed to deliver the message.
- Google: if you choose Google sign-in, Google processes that sign-in and provides the account information needed to authenticate you.
- Razorpay: processes INR credit-pack payments and INR monthly subscriptions (cards/UPI and related checkout data).
- PayPal: processes USD/international credit-pack payments and USD monthly subscriptions.
Providers may process information in countries other than your own. If we introduce a new production AI provider or materially change how personal information is used, we will update this notice. Development experiments with another model do not mean all production chats use that model.
Private collections and public scenarios
Saved account conversations and user-created scenario collections are not listed publicly by default. Publishing a scenario makes its published description, cast, image, and other published fields available to visitors. Do not include private information in public content. Unpublishing removes a scenario from the public catalogue, but copies in existing saved conversations or copies already made by others may remain.
Private does not mean end-to-end encrypted or inaccessible to the operator: authorized technical access may be needed to provide the service, investigate issues, or handle a specific report.
Browser storage
The site uses browser storage for sign-in sessions, settings, and local recovery copies of story progress. Local data may remain on a device after sign-out. On shared devices, sign out and clear the site’s browser data when finished. Clearing browser data removes local copies but does not by itself delete your cloud account.
Retention and deletion
Saved accounts, conversations, and scenarios currently have no automatic expiry. They remain until removed through available controls or an account/data-deletion request is processed. Credit records, security logs, moderation history, and backups may need to remain longer for fraud prevention, disputes, recovery, or legal obligations. Retention depends on the type of information and the reason it is still needed; deletion is not necessarily immediate across backups or service providers.
Your choices and requests
When signed in, you can permanently delete your account yourself under Account in the app. Deleting your account removes your profile, saved chats and characters, credits, usage history, feedback and community content. To prevent repeated free-credit abuse, we keep a limited record of your normalized email address, a one-time marker that the welcome bonus was used, and a hashed device identifier for the welcome bonus; these are not deleted with the account. Referral credit rewards are no longer offered. You can also ask for access to, correction of, export of, or deletion of your account information by contacting admin@plotandcastai.com. Depending on where you live, you may have additional rights, including objecting to or restricting certain processing and complaining to a data-protection authority. We may ask you to verify account ownership before acting on a request. Do not send your password or verification code.
Age requirement and updates
PlotAndCast is intended for adults aged 18 or older. If you believe a child has created an account, contact us. We will update the date on this page when this notice changes.