Privacy Policy

The short version

• Your manuscript is yours. We use it only to run Virvyxn for you.
• To read your text, Virvyxn sends it to Anthropic's Claude API. We do not use your content to train AI models, and Anthropic does not by default for API data.
• Other authors cannot see your manuscripts.
• This is a beta: there are no automatic backups. A deleted manuscript waits 30 days in the trash, then it is gone for good. Keep your original files.

1. Who we are

Virvyxn is operated by Virvyxn, Florida, USA. Questions about your data: business.zorf@gmail.com.

2. What we collect

• Account. Your email address. If you sign in with Google, the name and email Google shares with us. If you join the waitlist, your email and, when the link you followed carried them, its campaign tags (which post or message brought you), used only to count sign-ups per post.
• Your content. Manuscripts you import or write, the Story Model built from them (characters, facts, who knows what and when, and the quotes that support each one), and the corrections, notes and decisions you make.
• Assistant conversations. Messages you exchange with the in-app assistant, saved so you can continue them. They are stored in our database, encrypted with the key of the manuscript they belong to, and deleted with that manuscript or your account.
• Usage records. When Virvyxn reads your text or you use the assistant, we record how many tokens were used and what it cost, so we can apply usage limits. These records contain no manuscript text.
• Technical logs. Error messages and basic request information. We design logs not to include your manuscript text.

3. How we use it

To run Virvyxn: import and read your manuscript, build and show your Story Model, answer your questions in the assistant, apply plan limits, keep the service secure, and help you if you contact us.

We do not sell your data, we do not show ads, and we do not use your manuscripts to train AI models.

4. Who else processes your data

If we launch paid plans, a payment processor will be added to this list and we will update this policy first.

About Anthropic. Under Anthropic's published policy (checked October 20, 2026), data sent through the API is not used to train its models by default and is deleted within 30 days. Content flagged by its safety systems may be kept longer. Anthropic's policies can change; see privacy.claude.com.

5. Who can see your manuscripts

• Other authors: no. Access rules in the database keep each account's data separate.
• Virvyxn is not end-to-end encrypted. Your manuscript is stored encrypted, so the database on its own shows only unreadable bytes. But to show, search and analyse it, our server decrypts it in memory while it works, and sends the part being read to Anthropic. Whoever controls the running service together with its master key, the people who operate Virvyxn included, could read it. We do not read manuscripts unless you ask us for help, we are investigating abuse or a security problem, or the law requires it.
• Authorities: only through valid legal process.

6. Security

Traffic between your browser and Virvyxn uses HTTPS. Separate accounts are enforced by row-level security in the database.

Each manuscript has its own encryption key (AES-256-GCM). Virvyxn encrypts its text, titles, Story Model, notes and assistant conversations before they reach the database. The manuscript keys are themselves encrypted with a master key that is kept outside the database. Our hosting provider also encrypts its disks.

What stays readable in the database is structure, not content: your account email, dates, counts, the categories the Story Model uses, and the approximate length of each passage.

No system is perfectly secure, and we cannot guarantee it.

7. Keeping and deleting your data

• Delete a manuscript: it goes to the trash, where you can restore it for 30 days. Then it and its Story Model are deleted permanently, together with the key that encrypts them. From the trash you can also delete it at once. For a short time, the database provider's internal logs may still hold pieces of it, only in encrypted form, until they expire.
• Delete your account: your account and content are removed at once, including anything in the trash, with the keys that encrypt them.
• Usage records (no text) are kept to apply limits and keep accounts accurate, and are deleted with your account.
• Anthropic and hosting providers may keep copies for the periods described above or in their own policies.
• Backups: during the beta we do not run automatic backups. Before maintenance on the database we take an encrypted copy of it, which we keep for up to 30 days and then delete. Keep your original files.
• Export: you can export your data from Settings.

8. Your rights

You can access, export, correct or delete your data from within Virvyxn or by emailing business.zorf@gmail.com. If you live in California, the EU or the UK you may have additional rights; contact us and we will reply within 30 days.

9. Cookies

We use only the cookies needed to keep you signed in, and one that remembers the interface language you choose. Your browser also keeps a few settings and unfinished onboarding answers on your device (local storage), and, for the length of your visit, the campaign tags of the link you arrived by. No analytics, advertising or cross-site tracking.

10. Age

Virvyxn is for people 18 or older.

11. Changes

We will post changes here and email you about important ones before they take effect.