Last Updated: November 1, 2026 • Effective Immediately
Strict 18+ Age Privacy Rule
UnWritten does not knowingly collect or solicit personal information from anyone under the age of 18. If we learn that we have collected personal data from a minor under 18, we will immediately delete that information and terminate the associated account.
1. Information We Collect
When you interact with UnWritten (operated by DomiSec), we collect the following categories of information to provide and enhance our services:
Account Information: When you sign up or log in, we collect your email address, username, full name, and authentication credentials securely managed via Supabase Auth.
Interactive Dialogue & Chat Turn History: We store user dialogue turns and assistant messages in our encrypted database so that you can resume your interactive stories seamlessly across devices.
Transaction & Order Data: When you recharge digital Ink/Coins via Razorpay, we record order IDs, payment IDs, timestamp, and coin allocation amounts. We do NOT store your credit card numbers, CVVs, netbanking passwords, or UPI PINs.
Technical & Log Data: We automatically record IP addresses, browser types, operating systems, session cookies, and device identifiers to protect against fraud and rate-limiting abuse.
2. How We Use Your Information
DomiSec utilizes collected data strictly for the following operational purposes:
To synthesize real-time interactive character roleplay responses using generative AI models.
To manage your virtual wallet balance, coin deductions per turn, and story unlock entitlements.
To authenticate user sessions, prevent unauthorized account access, and ensure 18+ compliance.
To respond to customer support inquiries submitted via our contact forms and emails.
To maintain platform security, detect automated scraping bots, and prevent fraudulent transactions.
3. Payment Gateway Security (Razorpay)
All monetary transactions for digital coin recharges are processed through Razorpay Software Private Limited, a PCI-DSS Level 1 compliant payment gateway.
Payment transactions are encrypted using bank-grade 256-bit SSL protocols. DomiSec never stores or processes raw banking credentials. Payment dispute resolutions are governed by Razorpay guidelines and our strict No-Refund Policy.
4. Third-Party Service Providers
We work with trusted third-party service providers to power our platform:
Supabase: For database hosting, authentication, storage, and row-level security.
Google Gemini API: For synthesizing contextual character roleplay dialogue based on canon descriptions.
Razorpay: For secure digital payments processing in INR (Indian Rupees).
We do not sell, rent, or monetize your personal information to third-party advertisers or data brokers.
5. Your Data Rights & Retention
You have the right to request access to the personal data we hold about you or request permanent account deletion. Upon account deletion, your personal profile, chat history, and active sessions will be expunged from our live database, except for transaction records required by Indian financial law for tax compliance.
6. Privacy Grievance Officer & Contact
For privacy inquiries, data deletion requests, or questions regarding this Privacy Policy, please contact our Data Protection team: