プライバシーポリシー

Novilotは小説家向けの執筆アプリです。原稿はソフトウェアに預け得る最も個人的なものであり、このページはそれと残りのデータに何が起きるかを正確に説明します。短い版：文章はあなたのままです。頼んだ機能を動かすためだけに使い、データを売ることはなく、あなたの語でAIモデルを学習させることもありません。

収集するもの

• アカウントデータ。 メールアドレスと、ハッシュしたパスワード（bcryptでハッシュ。パスワードそのものは見えません）。
• あなたの文章。 プロジェクト、章、ストーリーバイブルの項目、アウトライン、メモ、章の版、アプリ内で作るそのほかすべてです。アプリがあなたに見せ返すために保存します。明示的に共有しない限り公開されません（例：自分で作るベータリーダー用リンク）。
• AI作業データ。 To power features like autocomplete, continuity checking, and voice matching, we store material derived from your manuscript: summaries, style profiles, continuity observations, and text embeddings. These are private working data, subject to the deletion and retention details below.
• 利用データ。 使う機能と基本的な製品イベント（例：分析が実行されたこと）、公平な請求のためのクレジット使用量。目標と連続記録のために書いた語数も数えます。
• お支払いデータ。 Payments are handled by Dodo Payments. We never see or store your card number; we store your Dodo Payments customer and checkout references, subscription status, and payment and refund records needed to maintain your credit balance.
• お送りいただくメッセージ。 アプリで送信するフィードバックと、私たちに送るメール。

AI機能が原稿をどう使うか

Anthropic's Claude API processes manuscript passages for AI features. OpenAI's embeddings API processes paragraphs and search queries to support meaning-based manuscript search. Preparing this search index can run in the background after you save or import chapters. Requests use encrypted connections. A full-manuscript analysis may process the entire manuscript within the coverage shown for that scan.

• We do not use your writing to train AI models or opt your manuscript into provider training programs. Anthropic and OpenAI do not train on commercial API content by default.
• We send content needed for the feature and its supporting processing, such as search indexing. Provider retention is separate from model training.
• AIの結果（提案、分析）はアカウントに保存されるので、再生成の料金はかかりません。

AI provider retention

We do not promise Zero Data Retention. Anthropic's standard API policy deletes inputs and outputs within 30 days, with exceptions for legal obligations and policy enforcement. Flagged content may remain for up to two years and safety classifications for up to seven years. Feedback deliberately submitted to Anthropic can be retained for five years and may be used for training; we do not submit your manuscript as provider feedback.

OpenAI's standard API abuse-monitoring retention is up to 30 days, with longer retention possible for legal or safety reasons. The embeddings endpoint does not retain application state. Deleting a project in Novilot does not itself erase provider logs or override their retention obligations.

見る Anthropic's retention policy および OpenAI's API data controls.

Human access

Private means your manuscript is not public or available to other writers unless you share it. It does not mean end-to-end encryption: our servers and processors need readable text to provide the service. People with privileged infrastructure or database access can technically access it. Operational access must be limited to what is necessary for support, debugging, security, abuse investigations, or legal obligations, not browsing your work for personal or commercial use.

Service providers can also permit authorized human access under their agreements, including safety review. We cannot promise that no person will ever review content. Text you choose to include in a support message is available to the people handling it.

アナリティクス

We use Google Analytics and PostHog to understand how the product is used so we can improve it. PostHog session replay is configured to mask text and inputs. Sentry helps diagnose errors; request-body collection and default personal-data collection are disabled, and replay text and inputs are masked. Diagnostic metadata may still be processed. We do not intentionally send manuscript text to analytics or error reports. We do not run ads.

クッキー

• nc_session：ログイン状態を保つ必須クッキーです。これがないとアプリは動作しません。
• 上記の目的のみに使う、Google AnalyticsとPostHogのアナリティクスクッキー。

データの所在と、処理する者

データは管理されたPostgresデータベースに保存され、Vercel経由で提供されます。データはNovilotの運営に必要なサービス提供者とのみ、その目的だけで共有します：

• Vercel（ホスティング）
• Prisma Postgres（データベース）
• Anthropic（AI機能）
• OpenAI (manuscript and query embeddings for search)
• Dodo Payments（決済）
• 再送信（トランザクションメール）
• Google AnalyticsとPostHog（分析）
• Sentry (error monitoring)
• Dropbox and GitHub (only when you connect an external backup destination)

We do not sell your data. Manuscript processing is limited to providing the service, your chosen sharing and backup features, and necessary legal or security obligations.

保持と削除

• Project deletion removes its manuscript, chapter history, Story Bible, summaries, continuity records, embeddings, and saved analyses from the active database. Manuscript-derived voice profiles are invalidated so they cannot keep deleted excerpts.
• Chapter deletion removes that chapter and its version history, and invalidates affected derived analyses and voice profiles. Project-level Story Bible entries, outlines, and notes you have retained remain until you edit them or delete the project.
• To delete your entire account, contact us (see below). Account deletion removes your writing, AI working data, usage history, profile, and linked in-app feedback from the active database. Records required by law, such as payment records held by the payment provider, can have separate retention obligations.
• Our Prisma Postgres plan keeps automated database snapshots for seven days. Deleted data can remain in an earlier snapshot until it expires. This backup window is separate from the AI-provider retention and external copies described on this page.
• Exports, copies shared with others, and backups in your connected Dropbox or GitHub account are not erased by deleting a Novilot project or account. You control those copies separately.
• The browser can hold analysis caches and unsynced edits. Deleting through the app clears the affected local copies on that device. Copies on offline or other devices may remain until cleared there.
• 原稿はアプリからいつでもエクスポートできます（DOCX、EPUB、HTML、Markdown、またはPDF）。

あなたの権利

お住まいの地域によっては（たとえばGDPRやCCPAのもとで）、個人データへのアクセス、訂正、書き出し、削除、および一部の処理への異議申し立ての権利があります。ご連絡ください。所在地にかかわらず、どなたのリクエストも尊重します。

子ども

Novilotは13歳未満の子ども向けではなく、そのデータを故意に収集することはありません。

変更

本ポリシーを変更する場合は、このページと上部の日付を更新します。原稿の扱い方に実質的な影響がある変更については、効力発生前にアプリ内またはメールでお知らせします。

お問い合わせ

メール support@novilot.com、またはアプリ内の「フィードバックを送信」ボタンをご利用ください。プライバシーに関するご要望には、担当者がお答えします。