Greythread Inc. Privacy Policy

Greythread Inc. (the "Company") is committed to maintaining robust privacy protections for its users. Our Privacy Policy ("Privacy Policy") is designed to help you understand how we collect, use and safeguard the information you provide to us and to assist you in making informed decisions when using our Service.

For purposes of this Agreement, "Site" refers to the Company's website, which can be accessed at pantser.io. "Service" refers to the Company's services accessed via the Site, in which users can create, organise, and develop serial fiction using AI-powered writing tools. The terms "we," "us," and "our" refer to the Company. "You" refers to you, as a user of our Site or our Service.

This policy describes how we collect, store, use and disclose information when providing the Service. Acknowledging this policy or creating an account does not grant permission for optional browser analytics or advertising measurement. Those choices are made separately in Cookie settings.

I. Information We Collect

We collect "Non-Personal Information" and "Personal Information." Non-Personal Information includes information that cannot be used to personally identify you, such as anonymous usage data, general demographic information we may collect, referring/exit pages and URLs, platform types, preferences you submit and preferences that are generated based on the data you submit, and number of clicks. Personal Information includes your email address, which you submit to us through the registration process at the Site.

1. Information Collected via Technology

To activate the Service you do not need to submit any Personal Information other than your email address. To use the Service thereafter, you do not need to submit further Personal Information.

We use browser, device, access-time and interaction information to operate and improve the Service. Information such as cookie identifiers and account-linked events can identify or distinguish a visitor; we do not treat all usage information as anonymous.

We use the following cookies and tracking technologies:

Essential cookies maintain sign-in sessions, support security and payments, and remember your cookie choices. Stripe may use cookies to manage checkout and prevent fraud.
Browser product analytics and recordings (PostHog) help us understand visits, feature use, errors, activation and retention. Where consent is required, tracking cookies, account identification and recordings start only after you allow analytics. In regions where notice and opt-out are sufficient, these operate by default until you object. When signed in, permitted events may be associated with your account ID and verified email. Recordings mask private writing and input values; we do not record audio, video, or raw network bodies. Replay recordings are retained for 30 days.
Advertising measurement (Google Ads) measures which campaigns produce signups and first paid subscriptions. We capture ad-click identifiers such as gclid, gbraid or wbraid and eligible campaign parameters. We do not enable personalized advertising or upload your email address to Google Ads. Where consent is required, the Google tag and advertising storage stay off until you allow advertising. Elsewhere, measurement may operate with notice and an opt-out. We honor Global Privacy Control for advertising.
Limited audience counts measure pageviews before you make an optional-cookie choice, where enabled by our audience-measurement policy. We send PostHog the time, website hostname, public page path and bounded campaign labels (UTM source, medium, campaign, ID, content and term). Private workspace paths are grouped; account IDs, ad-click IDs, full query strings, writing and recordings are excluded. PostHog uses your network address and browser information transiently to generate a daily rotating visitor hash; we do not use it to identify you or link these visits across days. No analytics identifier is stored in your browser in this mode. Rejecting browser analytics or opting out of account analytics stops these counts too. Cookieless measurement is not a claim that providers never process a network address.

Use Cookie settings in the site footer, or under Settings → Privacy once signed in, to allow or reject browser analytics and advertising separately. Refusal does not prevent use of Pantser. Explicit browser choices are remembered for up to 180 days and override regional defaults. A notice's Dismiss button records only that you dismissed the notice; it is not consent. Clearing storage or using another browser may require a new choice. Our country estimate determines regional defaults without retaining your IP address for that purpose.

Account product analytics is separate from browser cookies and advertising. Our servers observe genuine service actions such as account activation, imports, saved chapters, AI requests and responses, trials, payments and cancellations. We send limited metadata (IDs, action types, counts, durations, plan and payment amounts) to PostHog to evaluate product usefulness, diagnose failures, understand funnels and retention, and support customers. We do not include manuscript text, prompts, chat answers or payment-card details in these events. Where applicable we rely on legitimate interests in operating and improving the service, subject to your rights. You can object under Settings → Privacy once signed in, or at any time by contacting contact@pantser.io. Stop all optional measurement applies the browser choices and account analytics objection together. Essential account, billing, fraud prevention and security records remain necessary to provide the service.

With advertising permission, we retain captured ad-click identifiers for up to 90 days and link them to your account after sign-in. Stripe-confirmed first payments can then be reported from our server after a trial without a return visit. We select the latest eligible observed ad click preceding the payment. Campaign source information supports acquisition reporting; direct visits do not become ad conversions simply because the tag is present.

Withdrawing advertising permission removes stored ad-click identifiers and stops pending uploads for the linked account, including withdrawal from the same browser after logout. Withdrawing browser analytics stops new browser capture and recordings. An account analytics objection stops subsequent server analytics exports and suppresses queued exports. Requests already in flight and browser events collected before withdrawal may finish sending; new browser activity is not collected after withdrawal. An already-loaded Google script may send a consent-status request without advertising cookies; subsequent pages do not load it while permission is denied. These controls do not automatically erase information already received by providers; contact us for deletion requests.

We retain delivery diagnostics for up to 30 days for product events and 180 days for advertising, with limited deduplication markers kept as needed to avoid reporting the same business milestone twice. Product analytics is retained only as needed for the purposes described here and reviewed periodically. Contact contact@pantser.io to exercise access, objection or deletion rights, including any applicable right to opt out of sale or sharing. We do not sell personal information; the advertising settings also control our disclosure of advertising measurement signals to Google.

II. How We Use and Share Information

Personal Information

Except as otherwise stated in this Privacy Policy, we do not sell, trade, rent or otherwise share for marketing purposes your Personal Information with third parties without your consent. We do share Personal Information with vendors who are performing services for the Company:

Supabase — database, authentication, and file storage.
Anthropic / OpenRouter — AI model inference. Portions of your manuscript, notes, and prompts are sent to these providers to generate responses. We select providers whose terms of service prohibit using customer data to train their models.
Stripe — payment processing and subscription management. We do not store raw card numbers.
PostHog — product and operational analytics, including account-linked events as described above.
Google Ads — advertising measurement subject to the permissions and regional choices described above.

These providers process information under their applicable terms and privacy policies, including data processing agreements where applicable.

In general, the Personal Information you provide to us is used to help us communicate with you. For example, we use Personal Information to contact users in response to questions, provide technical support, and send transactional emails such as account confirmation and password reset notices.

We may share Personal Information with outside parties if we have a good-faith belief that access, use, preservation or disclosure of the information is reasonably necessary to meet any applicable legal process or enforceable governmental request; to enforce applicable terms of service, including investigation of potential violations; address fraud, security or technical concerns; or to protect against harm to the rights, property, or safety of our users or the public as required or permitted by law.

Non-Personal Information

In general, we use Non-Personal Information to help us improve the Service and customise the user experience. We also aggregate Non-Personal Information in order to track trends and analyse use patterns on the Site. This Privacy Policy does not limit in any way our use or disclosure of Non-Personal Information and we reserve the right to use and disclose such Non-Personal Information to our partners and other third parties at our discretion.

In the event we undergo a business transaction such as a merger, acquisition by another company, or sale of all or a portion of our assets, your Personal Information may be among the assets transferred. You acknowledge and consent that such transfers may occur and are permitted by this Privacy Policy, and that any acquirer of our assets may continue to process your Personal Information as set forth in this Privacy Policy.

III. How We Protect Information

We implement security measures designed to protect your information from unauthorised access. Your account is protected by your account password and we urge you to take steps to keep your personal information safe by not disclosing your password and by logging out of your account after each use. We further protect your information from potential security breaches by implementing certain technological security measures including encryption, firewalls, and secure socket layer technology. All data is transmitted over HTTPS. Data at rest is encrypted by Supabase. Access to your data is enforced by row-level security policies so that only your account can read or modify your content.

However, these measures do not guarantee that your information will not be accessed, disclosed, altered or destroyed by breach of such firewalls and secure server software. By using our Service, you acknowledge that you understand and agree to assume these risks.

IV. Your Rights Regarding the Use of Your Personal Information

Depending on your jurisdiction, you may have the right to:

Access — request a copy of the personal data we hold about you.
Correction — ask us to correct inaccurate data.
Deletion — request that we delete your account and associated data. We will delete or anonymise your personal data within 30 days of account deletion, except where we are required to retain it for legal or financial record-keeping purposes.
Data portability — receive your manuscript content in a portable format.
Objection — object to certain processing activities.

To exercise any of these rights, please contact us at contact@pantser.io.

V. Links to Other Websites

As part of the Service, we may provide links to or compatibility with other websites or applications. However, we are not responsible for the privacy practices employed by those websites or the information or content they contain. This Privacy Policy applies solely to information collected by us through the Site and the Service. We encourage our users to read the privacy statements of other websites before proceeding to use them.

VI. Changes to Our Privacy Policy

Greythread Inc. reserves the right to change this policy at any time. We will notify you of significant changes to our Privacy Policy by sending a notice to the primary email address specified in your account or by placing a prominent notice on our Site. Significant changes will go into effect 30 days following such notification. Non-material changes or clarifications will take effect immediately. You should periodically check the Site and this privacy page for updates.

VII. Contact Us

If you have any questions regarding this Privacy Policy or the practices of this Site, please contact us by sending an email to contact@pantser.io.

Last Updated: September 16, 2026

Pantser Privacy Policy