Privacy Policy
Last updated: December 29, 2025
1. Introduction
LinCat, LLC, doing business as Lustorio ("we," "us," or "our"), respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
This policy applies to users worldwide, including those in the European Economic Area (EEA), United Kingdom (UK), and California, and addresses requirements under GDPR, UK GDPR, and CCPA.
2. Data Controller
LinCat, LLC is the data controller responsible for your personal data.
Contact: support@lustorio.com
3. Information We Collect
3.1 Information You Provide
- Account Information: Email address for authentication
- Profile Information: Display name and preferences
- Content Preferences: Story type preferences and content settings
- User-Created Content: Characters, story choices, and custom inputs
- Payment Information: Processed securely by our payment provider; we do not store full payment details
3.2 Information Collected Automatically
- Usage Data: Pages visited, features used, story interactions
- Device Information: Browser type, operating system, device type
- Log Data: IP address, access times, referring URLs
3.3 Cookies
We use essential cookies for authentication and session management. We do not use advertising or third-party tracking cookies.
4. Legal Basis for Processing (GDPR)
We process your personal data under the following legal bases:
- Contract: To provide and maintain the Service you requested
- Legitimate Interests: To improve our Service, prevent fraud, and ensure security
- Consent: For marketing communications (where applicable)
- Legal Obligation: To comply with applicable laws
5. How We Use Your Information
- Provide, maintain, and improve the Service
- Process transactions and send related information
- Send service-related notifications (e.g., magic link emails)
- Respond to customer support requests
- Monitor and analyze usage patterns to improve user experience
- Detect, prevent, and address technical issues and abuse
- Enforce our Terms of Service and Content Policy
6. AI Processing
Your story preferences, character information, and choices are processed by AI systems to generate personalized narrative content. This processing is essential to provide the core Service functionality. AI-generated content is stored to enable story continuity and the rewind feature.
7. Data Sharing and Disclosure
We do not sell your personal data. We may share your information with:
- Service Providers: Third parties who assist in operating our Service (e.g., payment processors, email providers)
- AI Providers: Third-party AI services to generate story content (data is processed per their privacy policies)
- Legal Requirements: When required by law or to protect our rights
- Business Transfers: In connection with a merger, acquisition, or sale of assets
8. International Data Transfers
Your data may be transferred to and processed in countries outside your jurisdiction, including the United States. For transfers from the EEA/UK, we use appropriate safeguards such as Standard Contractual Clauses.
9. Data Retention
We retain your personal data for as long as your account is active or as needed to provide the Service. After account deletion:
- Account and profile data is deleted within 30 days
- Story content is permanently deleted within 30 days
- Some data may be retained longer if required by law or for legitimate business purposes (e.g., fraud prevention)
10. Your Rights
10.1 Rights for All Users
- Access: Request a copy of your personal data
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your personal data
- Data Portability: Request your data in a structured, machine-readable format
10.2 Additional Rights for EEA/UK Residents (GDPR)
- Restriction: Request restriction of processing
- Objection: Object to processing based on legitimate interests
- Withdraw Consent: Withdraw consent at any time where processing is based on consent
- Lodge Complaint: File a complaint with your local data protection authority
10.3 California Residents (CCPA)
California residents have the right to:
- Know what personal information we collect and how it is used
- Delete personal information we have collected
- Opt-out of the sale of personal information (we do not sell personal data)
- Non-discrimination for exercising privacy rights
To exercise any of these rights, contact us at support@lustorio.com.
11. Security
We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS) and at rest, secure authentication via magic links, and regular security assessments. However, no method of transmission over the Internet is 100% secure.
12. Children's Privacy
Our Service is not intended for anyone under 18 years of age. We do not knowingly collect personal data from minors. If you believe we have collected data from a minor, please contact us immediately.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. The "Last updated" date at the top indicates when the policy was last revised.
14. Contact Us
For questions about this Privacy Policy or to exercise your data rights, please contact:
LinCat, LLC
Email: support@lustorio.com
For EEA/UK residents, you may also contact your local data protection authority if you have concerns about our data practices.