Privacy Policy

Last updated 7 October 2026

This policy covers literess.com and the Literess app at write.literess.com. It explains what personal data we collect, why we collect it, who else processes it, and what rights you have under the EU General Data Protection Regulation (GDPR).

1. Who is responsible for your data

The data controller is the sole proprietorship that builds and runs Literess:

We have not appointed a data protection officer. Write to the address above about anything in this policy.

2. What we collect

• Your account. Your email address and display name. You sign in with one-time codes we email you, so we store no password.
• Your work. Documents, projects, version history, comments and suggestions, your conversations with Literess, story maps, game campaigns, and the files you upload (images, audio and voice recordings, and their transcripts).
• What Literess remembers. Notes the assistant keeps about you and your projects so she stays consistent between conversations. Ask us and we will show you these notes or delete them.
• Activity in the editor. While you write, the app records events such as edits, accepted or rejected suggestions, pauses and page changes. Literess uses them to decide when to offer help.
• Connected agents and integrations. If you connect an outside AI agent, it can read and edit your documents. It can also see what you have open, but only if you turn on "Sees your screen" for that agent. If you connect Notion, we store your Notion access token encrypted with AES-256.
• Technical data. IP address and browser details in server logs, error logs, and your push-notification subscription if you allow notifications.

3. Why we use it, and on what legal basis

• To provide Literess to you: storing your work, running the assistant, and signing you in. This is necessary to perform our contract with you (Art. 6(1)(b) GDPR).
• To keep the service secure and working: preventing abuse, fixing errors, and checking the quality of AI answers. AI requests are traced in an observability tool we host ourselves. This is our legitimate interest (Art. 6(1)(f)).
• Optional features (notifications, Notion, letting an agent see your screen) are based on your consent (Art. 6(1)(a)). You can withdraw consent at any time in the app's settings or in your browser.

We do not sell your data, show ads, or use your writing to train AI models.

4. Who else processes your data

To answer you, Literess sends the relevant parts of your documents and conversation to the AI model handling the request. Which provider receives it depends on the model selected in the chat and on the background task (titles, summaries, search indexing, voice). Each provider processes the data under its own API terms.

• Google (Gemini on Vertex AI and the Gemini API): AI models, voice, and search indexing. Embeddings for search are processed in the EU. Ireland / USA.
• Moonshot AI (Kimi models) and Xiaomi (MiMo models). China.
• Groq, OpenCode, GitHub Copilot (GitHub, Microsoft) and Cursor (Anysphere): AI models. USA.
• OpenAI: only if you connect your own ChatGPT account, in which case requests run under that account. USA.
• Exa and Firecrawl: web search and page reading when Literess looks something up. They receive the search query or the page address, not your documents. USA.
• Hetzner Online: servers and database. EU.
• Mailgun (Sinch): sends your sign-in codes.
• Cloudflare: DNS for our domains and delivery of literess.com.
• Google Fonts: literess.com loads its typefaces from Google, which sees your IP address.
• Notion: only if you connect it.
• Your browser's push service (Apple, Google or Mozilla) delivers notifications if you allow them.

Some of these providers are outside the European Economic Area. Transfers to the USA rely on the EU–US Data Privacy Framework where the provider is certified, or on standard contractual clauses. China has no EU adequacy decision.

5. How long we keep it

• Your account and your work are kept for as long as your account exists.
• Documents you delete are permanently removed within 30 days.
• Notion connection data is deleted as soon as you disconnect.
• When you close your account, we delete your account data within 90 days.
• Logs and AI traces are kept only as long as we need them to run and fix the service.

6. Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict or object to its processing, or hand it over in a portable format. You can also export your documents from the app yourself. Write to [email protected] and we will answer within one month.

You can also complain to the Polish supervisory authority: Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa (uodo.gov.pl), or to the authority in your own EU country.

7. Cookies and browser storage

The app sets one session cookie to keep you signed in. It also keeps your preferences (theme, layout, sounds) in your browser's local storage. Both are needed for the app to work. We use no advertising, analytics or third-party tracking cookies.

8. Children

Literess is not meant for anyone under 16, and we do not knowingly collect their data.

9. Changes

When this policy changes, we update the date at the top. We tell you about significant changes in the app before they take effect.