Legal
Last updated: March 2026
Novelmint is a product of TeamLesh LLC, a Washington State corporation.
This Privacy Policy describes how TeamLesh LLC (operating Novelmint) collects, uses, and protects your personal information.
Account data: name, email, and hashed password; profile information you choose to provide. Usage data: pages visited, pipeline stages completed, credit balance and transaction history, reading history and chapter unlock records. Payment data: processed by Stripe — we do not store full card numbers. AI Pipeline data: story inputs are transmitted to Anthropic for prose generation. Technical data: IP address, browser type, session cookies, and anonymized Vercel Analytics.
We use your data to: provide and operate the Service; process payments; detect fraud and abuse; send transactional emails; improve our product using aggregated, anonymized data; use story titles, cover images, and excerpts from published works to promote the platform (published authors may opt out by contacting legal@novelmint.ai); use reader usernames and submitted feedback for platform marketing purposes (readers may opt out by contacting legal@novelmint.ai); and send marketing communications (consent — opt-in only).
When you use the Novelmint pipeline, your story data is transmitted to Anthropic, LLC for processing. Anthropic's API terms prohibit training on customer API data. Novelmint is the data controller for your account; Anthropic acts as a processor. See anthropic.com/privacy for details.
All data in transit is encrypted via TLS 1.2+. Passwords are hashed and never stored in plaintext. API keys are encrypted using Supabase Vault. Our infrastructure is hosted on AWS with access controls and audit logging.
We do not sell your personal data. We share data only with: Supabase (database, auth, storage); Stripe (payment processing and author payouts); Anthropic (AI prose generation — story inputs only); Vercel (hosting and anonymized analytics); and Sentry (error monitoring, no PII in payloads). We may disclose data if required by law or valid authority request. In the event of a merger or acquisition, your data may transfer to the acquiring entity with prior notice.
All users may: access their data via account settings; request deletion of their account and associated data; and opt out of marketing emails at any time. EEA/UK users (GDPR) also have: the right to data portability; the right to restrict processing; and the right to lodge a complaint with your supervisory authority. California users (CCPA): we do not sell or share your personal information for behavioral advertising. To exercise any right, contact privacy@novelmint.ai.
Account data is retained while your account is active and deleted within 90 days of closure. Transaction records are retained for 7 years for legal compliance. Pipeline artifacts are retained while your account is active and deleted on closure or on request.
Novelmint is available to users aged 13 and older. We do not knowingly collect personal information from anyone under 13. If you believe a user under 13 has created an account, contact privacy@novelmint.ai and we will promptly investigate and delete the account.
We will notify you of material changes via email or in-app notice. Continued use constitutes acceptance.
Contact: privacy@novelmint.ai · TeamLesh LLC, Washington State, USA
Other legal documents