1. Controller and contact
The controller is ZEROX IT CONSULTING, S.L., Spanish tax ID B90449810, at Urbanización Los Pinos, Torre 3, 12.º D, Montequinto, 41089 Dos Hermanas, Seville, Spain. Contact hello@adventurerecast.com about privacy or to exercise your rights.
This policy covers the public website, waitlist, beta and Adventure Recast studio. You do not need an account to browse the website or download demos.
2. Data, purposes and legal bases
- Launch notification: email, optional name, language and consent record, to send the requested notification. Basis: your consent, which you may withdraw without losing access to public information.
- Account and service: account identifiers, email, session, projects, sources, versions, text, instructions, images and generated files, to authenticate you, save work, edit, generate and provide downloads. Basis: performing the contract or requested pre-contractual steps.
- Support and operation: communications, error records, job identifiers, consumption and diagnostics; these may contain project excerpts, instructions or model responses. Bases: providing the service and our legitimate interest in resolving incidents, keeping it secure and preventing abuse.
- Website security: IP address, browser information and technical request logs. The waitlist uses an IP HMAC for abuse limits, separate from the signup; this does not anonymise every infrastructure log. Basis: our legitimate interest in protecting the service.
- Payments, if made: payment references, amount, package and credit transactions. Stripe collects payment details in its own form; Adventure Recast does not receive your complete card number. Bases: contract and accounting, tax or other legal obligations.
Email is necessary for the waitlist and account; a name on the waitlist is optional. Without necessary content or context, we cannot perform a requested operation. We do not use these purposes to send advertising beyond the notification you consented to.
3. Your work is private; human access is exceptional
We do not read or inspect your work for creative, commercial or curiosity-driven purposes. Our team may access content only when strictly necessary for support, debugging, errors, recovery or technical security, or an enforceable legal obligation. We limit that access to authorised personnel and necessary information, subject to confidentiality.
We do not sell manuscripts or personal data, publish your work without permission or use your projects to train ZeroX’s own models. This policy does not imply end-to-end encryption or that content is technically inaccessible to necessary operators.
Automated processing differs from human access: saving, analysing a PDF, translating, reviewing, illustrating or generating audio may require processing content. AI functions transmit necessary material or context to providers involved in the task.
4. Providers and international transfers
The current infrastructure uses these services according to the feature used:
- Vercel: hosting, website delivery, API, execution and technical logs.
- Supabase: authentication, database and private files.
- OpenAI: text, analysis and image functions.
- OpenRouter and routed model providers: certain generation and editorial review tasks.
- ElevenLabs: audio generation when requested.
- Stripe: payments when enabled and used.
The waitlist is processed through Vercel and Supabase; signing up does not send a manuscript to AI providers. These providers may process data outside the European Economic Area. Transfers must rely on an applicable adequacy decision or safeguards such as standard contractual clauses and, where appropriate, supplementary measures. You may request information about recipients and applicable safeguards through the privacy contact.
We do not claim zero retention or an absolute absence of human review by providers. Their security, retention and use of inputs and outputs depend on the service, contract, settings and model: some model providers may allow improvement or training uses. The linked policies describe their practices; our commitment concerning our own models is not a universal guarantee about all providers. Do not submit secrets or third-party data you are not permitted to transmit.
5. Retention and deletion
- Waitlist: until the launch notification is sent or you withdraw consent. The signup is then deleted; only minimal evidence necessary for applicable obligations or claims may remain.
- Waitlist abuse limits: counters older than 48 hours are purged on the next valid signup, not necessarily at exactly 48 hours if there is no activity.
- Accounts and projects: while necessary to provide the service or until deletion or closure, except where the law requires retention. Project deletion removes active content, versions and associated diagnostics; it may continue in the background and retain files still used by other projects or systems.
- Incidents and technical records: for the time needed to resolve the incident, secure operation and address liabilities. Support files retained in a project may remain with it.
- Payments and obligations: for applicable statutory periods. Deleting a project does not itself delete accounting history.
Backups and providers’ internal retention follow their retention cycles; deletion in the studio does not mean immediate deletion of every external copy. Uploads not linked to a project may require a separate deletion request. For account closure or deletion enquiries, contact hello@adventurerecast.com.
6. Your rights and how to exercise them
You may request access, rectification, erasure, restriction, objection and portability where applicable, and withdraw consent. Email us from your associated address with your request; we will seek only proportionate additional information if identity verification is needed. Withdrawal does not affect the lawfulness of earlier processing.
We normally respond within one month. If complexity or the number of requests permits a legal extension, we will inform you within the first month. You may complain to the Spanish Data Protection Agency or the competent authority where you live. We do not make decisions based solely on automated processing that produce legal or similarly significant effects on you.
7. Third-party data, security and changes
Do not upload special-category data, information about minors or third-party personal data unnecessary for a fictional module. If you want to use the service professionally to process data for clients, contact us first to establish the respective roles and any required data-processing agreement; this page does not replace one.
We use authentication, access controls and authorised downloads for private projects. No system can guarantee absolute security. If a personal-data breach occurs, we will act and notify as required by applicable law.
The service is intended for adults aged 18 or over. Report data improperly submitted by a minor. Material changes to this policy will be communicated appropriately. See also our cookies and local storage policy.