Privacy Policy

1. Introduction

Fabula ("we", "our", "us") operates the Fabula website and MCP server (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

Account Information: When you sign up, we collect your email address, display name, and a hashed password. Authentication is handled by Supabase.

Usage Data: We track the number of stories generated and saved per month for plan enforcement. We do not store the content of generated stories on our servers unless you explicitly save them.

Payment Information: Payment processing is handled entirely by Stripe. We do not store credit card numbers or bank details. We receive only your Stripe customer ID and subscription status.

Technical Data: Standard server logs including IP address, browser type, and request timestamps for security and performance monitoring.

3. How We Use Your Information

• To provide and maintain the Service
• To manage your account and subscription
• To enforce usage limits based on your plan
• To communicate important updates about the Service
• To detect and prevent fraud or abuse

4. Data Sharing

We do not sell your personal data. We share data only with:

• Supabase: Authentication and database hosting (EU region)
• Stripe: Payment processing
• Amazon Web Services: Infrastructure hosting (eu-central-1, Frankfurt)

5. Data Retention

Your account data is retained as long as your account is active. Saved stories are retained until you delete them or close your account. You can request deletion of your account and all associated data at any time by contacting us.

6. Children's Privacy

Fabula is designed for use by parents and guardians. We do not knowingly collect personal information from children under 16. The child's name, if provided for story personalization, is used only within the story generation prompt and is not stored separately in our database.

7. Your Rights (GDPR)

If you are in the European Economic Area, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request deletion of your data
• Restrict or object to processing
• Data portability

To exercise these rights, contact us at privacy@fabula.dev.

8. Cookies

We use essential cookies for authentication (Supabase session tokens). We do not use advertising cookies or third-party tracking cookies. See our cookie banner for more details.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new "Last updated" date.

10. Contact

For questions about this Privacy Policy, contact us at privacy@fabula.dev.