Privacy notice

Last updated 6 August 2026

This notice explains what personal data Tresario ("we", "us") collects through Tresario (the "Service"), why, and what rights you have over it.

1. What we collect

• Account data — your email address, a securely hashed (never plain-text) password, and your display name.
• Your writing — projects, chapters, chapter notes and synopses, character notes, project notes, front-matter (publisher details, foreword) and any images you upload as inspiration. Manuscript text and character/notes content is encrypted at rest.
• Technical data — IP address and timestamps for login and security events, and basic error logs, kept only as long as needed to keep the Service secure.
• Cookies — a session cookie to keep you logged in, and a preference cookie for light/dark mode. We don't use advertising or tracking cookies.

2. Why we process it

To provide your account and writing space, keep the Service secure, and — where you've subscribed to a paid plan — to administer billing. We don't sell personal data, and we don't use your writing to train any model.

3. Who we share it with

Your data is not sold or shared for marketing. It's processed by the following providers only where the relevant feature is switched on:

• No third-party processors are currently active — your data stays on the Service's own server.

4. Security

Passwords are hashed, never stored in plain text. Manuscript content, character notes and project notes are encrypted at rest using AES-256. Application data is stored outside the public web files, so it isn't reachable by browsing the site directly.

5. Your rights

Under UK GDPR and the Data Protection Act 2018, you can ask us to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Erase your account and all associated data ("right to be forgotten") — this permanently deletes your projects, uploads and billing links.
• Export your writing at any time using the PDF/EPUB export tools in each project, or request a full data export.
• Object to or restrict processing in certain circumstances.

To exercise any of these rights, contact the site operator. We'll respond within one month. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk) if you're unhappy with how we've handled your data.

6. Data retention

We keep your data for as long as your account is active. If you delete your account, or ask us to, your projects, uploads and account record are permanently removed within 30 days, except where we're required to keep minimal billing records for legal or tax purposes.

7. Changes to this notice

We may update this notice from time to time. Material changes will be flagged on this page.

8. Contact

Contact details are available on request from the site operator.