PLOTLIGHTLegal

Legal

Privacy Policy

Plotlight Studios — plotlightstudios.com

Plotlight Studios Privacy Policy

Effective Date: April 14, 2026

Last Updated: April 14, 2026

Plotlight Studios ("Plotlight," "we," "us," or "our"), operated by RoleCall Studios LLC, operates the Plotlight platform at plotlightstudios.com. This Privacy Policy explains how we collect, use, share, and protect your information when you use our service.

By using Plotlight, you agree to the collection and use of information as described in this policy.

1. Information We Collect

1.1 Account Information

We collect the following when you create an account:

  • Email address
  • Username
  • Age confirmation (you must confirm you are 18 or older)

We do not collect your birthdate.

1.2 Profile Information

If you create a public profile or portfolio, we collect and display:

  • Display name
  • Avatar image
  • Bio / description
  • Links you choose to add

This information is publicly visible to all users, including users who are not logged in.

1.3 User Content

To provide the service, we store content you create, including characters, lorebooks, presets, personas, prompts, and draft content. Published content is visible to other users. Draft and private content is visible only to you.

Draft storage limits may apply to prevent abuse of free storage.

1.4 Content Moderation Records

When content is submitted for review through our trust-based publishing system, we retain:

  • The submission and its review status (approved, rejected, pending)
  • The reason for rejection, if applicable
  • Your Trust Score history

This data is used to operate the trust system and is not shared publicly.

1.5 Device Information

We collect basic device information including browser type, operating system, and device type.

1.6 IP Addresses

We collect IP addresses for security purposes, including abuse detection and ban enforcement. IP address logs are retained for 90 days.

1.7 Usage Data

We collect usage data such as page views, content views, search queries, and feature usage to understand how people use the service and to generate public metrics (such as view counts and download counts on published content).

1.8 Analytics

We use custom first-party analytics stored in our own database. We do not use third-party analytics services. We do not use advertising trackers. We honor Do Not Track browser signals.

1.9 Content Rating Preferences

We store your content rating preferences (whether you have enabled After Dark content) as a cookie and in your account settings.

2. Published Content is Public

2.1 Public Visibility

When you publish content to Discovery, it becomes publicly visible. This includes:

  • The content itself (character cards, lorebooks, presets, etc.)
  • Your username and profile information
  • Engagement metrics (view count, favorite count, fork count)
  • Tags and content ratings you have assigned

2.2 Search Engine Indexing

Published content may be indexed by search engines. If you do not want content to be publicly discoverable, keep it in draft or private status.

2.3 Forked Content

When other users fork your published content, a copy is created in their library. If you later delete your content or your account, existing forks remain with attribution anonymized to "Deleted User."

3. How We Use Your Information

We use collected information to:

  • Provide, operate, and maintain the Service
  • Display your published content to other users
  • Operate the trust-based publishing and content review system
  • Generate public engagement metrics (views, favorites, forks)
  • Detect and prevent abuse, spam, and violations of our Terms
  • Respond to support requests
  • Send transactional emails (account verification, password reset, content review notifications)
  • Send optional platform update emails (you may opt out at any time)
  • Improve the Service based on usage patterns
  • Comply with legal obligations

We do not use your content to train AI models.

4. Information We Share

4.1 Public Content

Published content, your username, and your public profile are visible to all users and may be indexed by search engines.

4.2 Service Providers

We use the following third-party services to operate the platform:

  • Supabase — Database hosting, authentication, and file storage
  • Railway — Application hosting
  • Resend — Transactional email delivery

These providers process data on our behalf under data processing agreements.

4.3 Legal Requirements

We may disclose your information if required by law, subpoena, court order, or government request. We may also disclose information to protect our rights, prevent fraud, or ensure user safety.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, user information may be transferred to the acquiring entity.

4.5 No Sale of Data

We do not sell, rent, or trade your personal information to third parties for marketing or advertising purposes.

5. Data Retention

5.1 Account Data

We retain your account data for as long as your account is active. When you delete your account, we delete your personal data within 30 days, except:

  • Published content that has been forked by other users (forks remain, attribution anonymized)
  • Data required to be retained by law
  • Anonymized usage data that cannot be linked back to you

5.2 Content Moderation Records

Trust Score history and moderation records are retained for 12 months after account deletion to prevent abuse (e.g., banned users creating new accounts).

5.3 IP Addresses

IP address logs are retained for 90 days, then deleted.

5.4 Draft Content

Draft content that has not been published may be subject to storage limits. Inactive drafts may be deleted after extended periods of inactivity (at least 12 months). We will notify you before deleting inactive drafts.

6. Your Rights

6.1 Access and Export

You have the right to access and export your data. You can request a full export of your account data through your account settings or by emailing boxoffice@rolecallstudios.com. Exports include your profile information, content, and account settings.

6.2 Correction

You can update your account information and content at any time through the Service.

6.3 Deletion

You can delete your account by emailing boxoffice@rolecallstudios.com. See Section 5.1 for what happens to your data upon deletion.

6.4 Portability

You can export your content in standard formats (JSON, PNG) through the Service's export features.

6.5 Objection

You can object to certain processing activities by contacting us. We will review your request and respond within 30 days.

6.6 GDPR (European Users)

If you are in the European Economic Area, you have additional rights under the General Data Protection Regulation, including the right to lodge a complaint with your local data protection authority. Our legal basis for processing your data is:

  • Contractual necessity — to provide the Service you signed up for
  • Legitimate interest — to improve the Service and prevent abuse
  • Consent — for optional features like marketing emails

6.7 CCPA (California Residents)

California residents have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information.

7. Security

We implement industry-standard security measures to protect your data, including:

  • HTTPS encryption for all data in transit
  • Secure authentication via third-party OAuth providers (Google, Discord, GitHub)
  • Row-level security policies on our database
  • Regular security audits
  • Rate limiting on API endpoints

Content on Plotlight is NOT end-to-end encrypted. Published content is stored in readable form on our servers so it can be displayed to other users. Draft and private content is protected by access controls but is not encrypted.

8. Children

Plotlight is not intended for anyone under 18 years of age. We do not knowingly collect personal information from minors. If we discover that a minor has created an account, we will terminate the account immediately.

9. International Data Transfers

Our servers are located in the United States. If you access the Service from outside the United States, your data will be transferred to and processed in the United States. By using the Service, you consent to this transfer.

10. Cookies

We use cookies for:

  • Authentication — Maintaining your login session
  • Preferences — Storing your content rating preferences (After Dark toggle)
  • Security — Detecting abuse and preventing unauthorized access

We do not use advertising or tracking cookies. See our Cookie Policy for full details.

11. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will notify you by email and provide at least 30 days notice. Non-material changes are effective immediately upon posting.

12. Contact

For questions about this Privacy Policy, data requests, or privacy concerns:

Email: boxoffice@rolecallstudios.com

End of Privacy Policy

— End of Privacy Policy —