How we collect, use, and protect your information.

Privacy Policy

Effective Date: November 12, 2026

Izuverse ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you access or use the izuverse.com website, the app at app.izuverse.com, and related services (collectively, the "Services").

Privacy Policy

1. Information We Collect

We collect the following information:

• Account information: name, email address, and a password if you set one (stored in encrypted form by our authentication provider). You may also add a phone number to your profile.
• Google sign-in data: if you sign in with Google, we receive your name, email address, and profile picture from Google. We use your name and email to create and identify your account. Your Google profile picture may be included in the authentication data stored by our authentication provider (Supabase). The avatar shown in the app is the photo you upload, which is stored on our CDN.
• Content you create: novel projects, manuscripts, Codex entries, maps, covers, idea boards, and related files.
• Preferences and usage data: for example language, theme, the last project you opened, and display settings.
• Technical information: IP address, browser, and device information, which is typically recorded by our hosting and authentication infrastructure.
• Payment information: transaction and subscription data. We do not store payment card details.

2. How We Use Your Information

Your information is used to:

• Provide and improve the Services.
• Process payments and manage accounts and subscriptions.
• Send important notices, such as sign-in codes or service updates.
• Provide customer support.

3. Information Sharing

We do not sell or rent your personal information to third parties. Information is only shared in the following situations:

• With your explicit consent.
• To comply with legal obligations.
• With service providers who help operate the platform: Supabase (authentication and database), Cloudflare (hosting, CDN, and file storage at cdn.izuverse.com), and Duitku (payments). For certain operational tools, such as automatic naming of uploaded map or cover assets, those files may be sent to an AI model provider (such as OpenRouter) solely to generate names and categories.
• In the event of a merger or business transfer.

4. Data Security

We implement appropriate technical and organizational security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction.

5. Cookies and Similar Technologies

We use cookies and local storage in your browser to keep you signed in, remember display preferences, and run app features. At the time this policy takes effect, we do not use third-party advertising or analytics cookies.

6. Data Retention

We retain your personal information while your account is active or as needed to provide the Services. You can delete your account from the app settings. After the account is deleted, your personal data and content (including manuscripts, Codex entries, maps, and files you uploaded) will be removed. If you cannot sign in to the app, send a deletion request to hi@izuverse.com.

7. Your Rights

You have the right to:

• Access your personal information.
• Correct inaccurate or incomplete data.
• Request deletion of your personal information.
• Object to processing of your data.
• Request data portability.

To exercise these rights, contact us using the details below. Some account data and preferences can also be changed directly in the app.

8. Third-Party Services

Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of those external sites.

Google Services

We employ Google's OAuth 2.0 service for user authentication. When you use Google authentication, you are also subject to Google's privacy policy and terms of service:

• Google Privacy Policy
• Google Terms of Service

Google Limited Use Disclosure

Izuverse's use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

9. Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own, because we use infrastructure providers that operate internationally (including Supabase and Cloudflare). We ensure appropriate safeguards are in place to protect your data during such transfers.

11. Changes to this Policy

We may change this Privacy Policy from time to time. The latest version will be posted on this page, together with its effective date. If a change is material, we may also notify you by email.

12. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the Republic of Indonesia. Disputes arising from this policy are subject to the jurisdiction of the courts of Indonesia.