Privacy Policy

1. Overview & Data Controller

TextCorn (referred to as "we", "us", or "our") is committed to protecting the privacy and security of your personal data. This Privacy Policy outlines how we collect, process, store, use, and share information when you use our texting story reader and creator platform (collectively, the "Service").

Your use of the Service is also governed by our Terms of Service and Cookie Policy. By registering an account or accessing the platform, you consent to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

Account & Profile Data: When creating an account, we collect credentials and metadata. Because we use Discord OAuth as our primary authentication method, we collect your Discord User ID, username, email address, avatar icon path, and user metadata directly from Discord API responses. In onboarding, we collect your custom handle and chosen display name.

User-Generated Content: We collect all texts, chapters, stories, cast character definitions, comments, feedback ratings, likes, custom reading lists, bookmarks, and other media or messages uploaded or sent through the Service.

Usage & Technical Data: We automatically track interactions with our platform, such as page views, story reads, chapter completion times, reader reaction rates, search queries, IP addresses, browser types, operating systems, and timestamped actions. We also log API requests to monitor server health, performance bottlenecks, and resource constraints.

3. How We Process and Use Your Information

We process your data to authenticate your identity, prevent unauthorized access to draft materials, sync your reading library across devices, publish stories, and process creator notifications.

For content gating: when you attempt to access gated creator channels or stories, our Service calls the Discord API using your stored credentials and token permissions to check if your account is currently a member of the creator's linked Discord guild server.

We also use anonymized statistics to analyze overall user preferences, optimize content discovery algorithms, debug errors, and ensure compliance with our security standards and community guidelines.

4. Sharing and Disclosure of Information

We do not sell, rent, trade, or lease your personal information to third-party advertisers or data brokers under any circumstances.

We share your data with trusted hosting, data storage, and authentication infrastructure partners, primarily Supabase (which operates as our backend database, secure media buckets, and user session manager) and Cloudflare (which handles DDoS protection, server caching, and static image/media delivery via CDN).

We may disclose your data if we are under a legal obligation to do so (e.g., responding to a court order or subpoena), to enforce our Terms of Service, or to protect the safety, properties, and rights of our users or the general public.

5. Data Infrastructure & Security Safeguards

Your personal data and creative drafts are protected using industry-standard physical, electronic, and administrative controls. Our database is built on Supabase's secure infrastructure, which enforces Row Level Security (RLS) on all tables.

RLS guarantees that your private story drafts, tokens, and personal settings can only be accessed or modified by authenticated API calls bearing your verified user ID.

All communication between your browser and our servers is encrypted using Secure Sockets Layer / Transport Layer Security (SSL/TLS). However, please note that no method of transmission over the internet or database storage is 100% secure, and we cannot guarantee absolute data protection.

6. GDPR, UK GDPR, and CCPA Rights

If you reside in the European Economic Area (EEA), the United Kingdom, or California, you are granted specific statutory rights regarding your personal information under applicable regulations like the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA).

These rights include: (a) Right to Access: Requesting a full copy of the personal data we hold; (b) Right to Rectification: Correcting inaccurate profile information; (c) Right to Erasure: Requesting the permanent deletion of your account and related data; (d) Right to Restriction: Limiting how we process your information; (e) Right to Data Portability: Transferring your data in a structured machine-readable format; and (f) Right to Opt-Out: Objecting to specific data processing operations.

You can manage your profile details or initiate account deletion directly within the settings menu. For data portability requests or general data inquiries, please email our privacy team at support@textcorn.app with the subject line 'Privacy Data Request'. We will respond within 30 days.