Privacy Notice
Last updated: 21 October 2026
The short version
- Your screenplay is not used to train AI models. Not ours, not anyone else's.
- We send your text to an AI provider only when you ask for something that needs it — an analysis, or a message to a character.
- There is no tracking pixel and no advertising cookie on this site or in the app, and no analytics in the app. This website counts visits with a cookieless tool that does not follow you around the web.
- You can export everything and delete your account.
Who is responsible
The data controller is Brand Factory Kft., Ráth György utca 16., 1122 Budapest, Hungary, contact@therka.com. We have not appointed a data protection officer; we are not required to.
What we hold, and why
| Data | Why | Legal basis |
|---|---|---|
| Email address and password (stored hashed) | To create your account and let you sign in | Performance of a contract |
| Your screenplay and its title page, language and settings | To save your work and show it back to you on any device | Performance of a contract |
| AI analyses of your screenplay | To show the character profiles, the inner voice and the emotional arc without paying to recompute them | Performance of a contract |
| Usage counters (how many analyses and chat messages, per day) | To enforce the allowance on your plan and stop abuse | Performance of a contract; legitimate interest in protecting the service |
| Subscription status, plan and billing period, and a Stripe customer reference | To know what you are entitled to. We never see or store your card number. | Performance of a contract; legal obligation (accounting) |
| Server logs (IP address, time, endpoint) for a short period | Security, abuse prevention and debugging | Legitimate interest |
What stays in your browser only
Some things are kept in your browser's local storage and are never sent to us: your chat history with each character, the Character Vault notes, character traits and your local notes.
The trade-off is real and worth knowing: clearing your browser data or changing computer loses them. Use the export function if they matter to you.
Who else processes it
We use a small number of providers. Each is bound by a data processing agreement and may only act on our instructions.
| Provider | What for | Where |
|---|---|---|
| Supabase | Accounts, database, cloud save | eu-central-1 (Frankfurt, Germany) |
| Google Cloud (Cloud Run, Firebase Hosting) | Running and serving the app | europe-west1 (Belgium) |
| Vercel | Standby hosting, used if the above is unavailable | Global CDN |
| Anthropic | The AI that analyses the screenplay and answers as your characters | United States |
| Stripe | Payments and subscription management | United States / EU |
| Cloudflare | Visit statistics for this website (therka.com) only; not used in the app | Global network |
| Resend | Account emails (confirmation, password reset, invitations) | eu-west-1 (Ireland) |
Transfers outside the EU/EEA
Anthropic and Stripe process data in the United States. Those transfers rely on the European Commission's Standard Contractual Clauses and, where the provider is certified, the EU–US Data Privacy Framework.
How your screenplay is used by the AI
When you run an analysis or send a message to a character, the relevant text — which may be the whole screenplay — is sent to Anthropic to produce that one response, and the response comes back to you.
- It is not used to train or improve any model.
- It is not shared with other users.
- Anthropic may retain it briefly for abuse monitoring under its own commercial terms, then delete it.
- Part of the request is cached for up to an hour to make repeated questions about the same screenplay cheaper and faster. The cache belongs to your request and is not readable by anyone else.
If you would rather no AI touched your text at all, the free tier never sends it anywhere except our own database, and the AI features are simply off.
How long we keep it
- Account and screenplay data: while your account exists.
- After you delete your account: removed from the live database promptly, and from backups as those age out.
- Invoices and payment records: as long as accounting law requires, 8 years under Hungarian accounting law.
- Server logs: a short rolling window.
Cookies
We use no advertising or analytics cookies, and we do not profile you. This website counts visits with Cloudflare Web Analytics, which sets no cookie and stores nothing in your browser; it tells us which pages are read, where visitors come from and roughly which country and device, not who you are. The app stores a sign-in token and your own preferences in your browser so you stay signed in — that is strictly necessary for a service you asked for, and it is not shared with anyone. This website remembers only your language choice, in your browser's local storage, so your next visit opens in the language you picked; it is never sent to us.
Your rights
You can ask us to give you a copy of your data, correct it, delete it, or hand it over in a portable form; you can object to processing based on legitimate interest, and ask us to restrict processing. The export function already gives you a portable copy of your screenplays at any time, without asking us.
Write to contact@therka.com and we will answer within one month. If you think we have got it wrong, you may complain to your national data protection authority — in Hungary that is the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH).
Children
therka is not intended for children under 16, and we do not knowingly collect their data.
Security
Traffic is encrypted in transit. Database access is restricted per user by row-level security, so one account cannot read another's work. Passwords are stored hashed by Supabase and are not visible to us. No system is perfect; if a breach ever affects your rights, we will notify you and the regulator as the law requires.
Changes
If we change this notice materially, we will tell you by email or in the app before it takes effect.