Laurel Bay Press

Privacy Policy

Effective July 5, 2026 · Version 2026-07-05

What we collect

Your account details (name, email, password hash), the content you create (manuscripts, chapters, covers, book metadata), product usage records (which features ran, token counts, and their cost, so we can operate fair-use limits and understand our costs), and billing state from Stripe. We never see or store your card number. Consent decisions are kept in an append-only ledger with a truncated hash of your IP, never the address itself.

What we use it for

To run the studio you signed up for, to enforce the free tier’s fair-use limits, to bill correctly, to answer support, and, only if you opt in, to build training data for Laurel’s future author model. We do not sell your data, rent it, or share it with advertisers. Ever.

Who touches your data

Our infrastructure providers host it (Fly.io for the application, Cloudflare for DNS and networking). AI requests send the relevant text to our model providers to generate your response; they are not permitted to train on it. Stripe processes payments. Each of these processes data to provide their service to us, nothing more.

Model training — your choice, off by default

The “Help train the author AI” toggle in AI & Privacy is off unless you turn it on. On means consented manuscript exports and AI writing sessions are copied to a segregated, consent-labelled store for future model training. Off, or never touched, means the training pipeline cannot see your work; the gate is enforced in code before any copy is made. Opting out stops new collection immediately, and you can request deletion of existing training copies.

Email

Transactional email (receipts, password resets, security notices) comes with the service. Marketing email is sent only with your consent, always carries an unsubscribe link, and unsubscribing is honoured immediately, in line with Canada’s anti-spam law (CASL).

Retention, export, deletion

Your content stays as long as your account does. You can export your work at any time. Deleting your account removes your content from the operating service within 30 days, with encrypted backups aging out on their own schedule; on request we also delete consented training copies. Canadian privacy law (PIPEDA) gives you the right to see what we hold about you and to correct it; write to us and we will.

Contact

Privacy questions and requests: support@laurelbaypress.com. We answer as humans, quickly.