Privacy Policy
Version 2026-10-09, effective 2026-10-09.
Effective [to be filled]
This policy explains how [to be filled] ("Troupe", "we") collects, uses and shares personal information when you use troupechat.app and the Troupe app. We comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, for Quebec residents, Quebec's Act respecting the protection of personal information in the private sector (Law 25). We do not sell your personal information.
1. Information we collect
| Category | Examples | Source |
|---|---|---|
| Account | Email, display name, password hash, plan, sign-up date | You |
| Content | Characters, cards, stories, lorebooks, prompts, AI outputs (text only; we do not accept image uploads) | You and AI providers |
| Provider keys | Your BYOK API keys (encrypted) | You |
| Usage and billing | Token counts, credits used, model used, timestamps, ledger entries | Generated by the Service |
| Payment | Plan, transaction IDs, last 4 card digits, billing country/province | Payment processor; we never receive full card numbers |
| Moderation | Flags, category scores, actions taken, reports you submit or receive | Moderation providers and users |
| Technical | IP address, device and browser type, app version, error logs | Your device |
| Marketplace | Stories you submit, review status, your display name, listing stats (imports, plays) | You and the Service |
2. How we use it
- Provide the Service: run your sessions, send prompts to AI providers, sync your content across devices.
- Meter usage and bill you: calculate credits, process payments, prevent fraud.
- Keep the Service safe: moderate content, enforce our policies, verify age for adult mode, investigate reports, meet legal reporting obligations.
- Operate and secure the Service: debug, monitor performance, prevent abuse.
- Communicate with you: transactional emails (receipts, security, policy changes). Marketing emails only with your express consent, and you can unsubscribe anytime.
We do not use your content to train AI models, and we do not allow our providers to do so through our account.
3. Who we share it with
We share personal information only with service providers that process it for us under contract, and only as needed:
| Provider | Purpose | Location |
|---|---|---|
| OpenAI | Hosted safe-mode generation; moderation | USA |
| Microsoft Azure AI Content Safety | Content moderation | East US (USA) |
| OpenRouter, NovelAI, other BYOK providers | Generation you request with your own key | USA / other |
| IONOS | Application hosting and database | USA (Kansas City) |
| Cloudflare | Network security, CDN | Global |
| Resend | Transactional email | USA |
| Stripe (web) and Google Play Billing (Android) | Payments | USA |
We may also disclose information when required by law, to protect the safety of any person, to report child sexual exploitation to authorities, or in connection with a sale or transfer of the business (with notice to you).
4. International transfers
Some providers process data outside Canada, mainly in the United States. Data processed there may be accessible to foreign courts and authorities under local law. We use contractual and technical safeguards with each provider.
5. Retention
| Data | Kept for |
|---|---|
| Account and content | Until you delete it or your account, then purged within 30 days |
| Backups | Overwritten within 35 days |
| Usage and credit ledger | 7 years (tax and accounting) |
| Payment records | 7 years (tax and accounting) |
| Moderation records | 1 year; longer if tied to an active investigation or legal report |
| Technical logs | 30 days |
| Audit log of admin, security and moderation actions | 2 years (730 days) |
| Usage telemetry (per-generation numbers, never message text) | 400 days |
| Unsubscribe links in marketing email | 400 days |
| Marketplace listings | Until you unpublish or delete them, then purged within 30 days; rejected submissions 1 year |
AI providers may keep request data for limited periods under their own policies (for example, for abuse monitoring).
6. Security
We encrypt data in transit (TLS) and encrypt provider keys at rest. Access to production data is limited to the operator. No system is perfectly secure; if a breach creates a real risk of significant harm, we will notify you and the Privacy Commissioner as required by law.
7. Your rights
You can:
- Access and export your data (Settings → Export, or email us)
- Correct inaccurate information
- Delete your account and content (Settings → Delete account, or troupechat.app/account/delete)
- Withdraw consent to optional processing, such as marketing emails
- Quebec residents: request data portability and information about automated decisions
We respond within 30 days. If you are not satisfied, you can complain to the Office of the Privacy Commissioner of Canada, or Quebec's Commission d'accès à l'information.
8. Children
The Service is not for anyone under 16. We do not knowingly collect information from children under 16 and will delete it if we learn we have.
9. Cookies
We use essential cookies for sign-in, security and preferences. We do not use advertising or cross-site tracking cookies.
10. Changes
We will post updates here and notify you of material changes by email or in the app before they take effect.
11. Contact
Privacy officer: [to be filled], [to be filled], [to be filled]