Privacy Policy

This policy explains what personal information Zenblis, LLC, doing business as Mythener ("Mythener", "we", "us"), collects and why. It also explains who we share it with and the choices and rights you have. It covers mythener.com, the Mythener workspace and the reader portal (the "Service").

The short version:

• Your writing is yours. We don't sell it, advertise with it or train AI on it.
• We collect what we need to run the Service and little else. We use no advertising trackers and no marketing cookies.
• You can export your work at any time and ask us to delete your account.

1. Who is responsible

Zenblis, LLC d/b/a Mythener, 5900 Balcones Dr. Ste 100, Austin, TX 78731, USA, is the controller of personal information described in this policy.

Contact us at privacy@mythener.com about anything in it.

When an author invites readers or adds editors, the author decides whom to invite and what to share. For readers' feedback and details, the author may be an independent controller alongside us. In the same way, a publisher's admins decide whom to add as members and what the publisher records about a book.

2. What we collect

Information you give us

• Account details: your email address, name, the genres you write, how you heard about Mythener, and your workspace preferences. If you set up a publisher, its name.
• Phone number, if you give one: it's optional. We keep it for account security and recovery, and will use it for two-step sign-in when we offer that. We never send promotional messages to your phone.
• Profile (optional): a bio, gender (if you choose to add it), location, social media links, website and profile photo.
• Your writing and project content: manuscripts and their version history, worlds, characters, plans, notes, images, publication settings and anything else you create in the workspace.
• Support messages: what you send us when you get in touch.
• Website chat: if you write to us with the chat on our website or sign-in pages, the name you give (it's optional), the email address you type and the conversation. We use them only to answer you, here or by email. If you reply to our email, your reply is added to the same conversation. We don't check that the address is yours, and the chat isn't linked to any Mythener account.

If an author invites you to read or edit

• Readers: your email address and display name, which editions and chapters you can read, your acceptance of any reading conditions the author set, and your feedback and comments (including the passages they refer to). We also store your chapter progress, reader settings, survey answers, and any files you upload, such as review receipts.
• Editors: the email address the author added you by, the book or series, and who added or removed you and when. You work in the author's own book, and nothing is copied into an account of yours. Each change you propose is saved in that book with the chapter's review as a suggestion: the passage, what you would replace it with, and your email address. If you have no Mythener account, signing in as an editor creates a profile under your address. It records when you joined and were last active, and holds anything you choose to add to it.
• If you are added by email: when an author adds you as an editor, or a publisher adds you as a member, we send an email to the address they gave us to tell you, even if you have no Mythener account. It names the person who added you and the book or publisher. You can ignore it; we don't send reminders.

The author can see all of this, apart from an editor's own profile. Other readers can't see your notes. An editor's suggestions, with the editor's email address, can also be seen by anyone else who can open that book's reviews, such as another editor of the book or, for a book shared with a publisher, that publisher's admins and editors.

An editor sees the author's name and the book, as our Terms describe.

Protected reading pages show a watermark with your email address, account ID and sign-in IP address, so leaks can be traced. We show the IP address on the page; we don't store it in our database.

Publishers

A publisher is a group of members with its own plan, such as a press. Some of what follows is being introduced in stages and may not apply to you yet.

What we record:

• The publisher: its name, who set it up and when, and its plan and billing status.
• Members: each member's email address and role, and who added them, changed their role or removed them, and when. If you joined by a publisher's invitation link, that is recorded too. A removed member stays in the publisher's history.
• Invitation links: each link's code, and who made it or turned it off, and when.
• Shared books: which book is shared with which publisher, and who shared it or stopped sharing it, and when. For a freeze, each proposal, acceptance, decline and withdrawal, with which side made it, who, and when.
• Submissions: the novels you sent, your note, when you sent them, and each step after that (accepted, declined or withdrawn), with who took it and when.
• A publisher's plan for a book: a word target, a due date, a stage and the staff assigned to the book, with who recorded each and when.

What a publisher sees about you and your book. When you share a book with a publisher, its editors and admins can read the book, as our Terms describe, and every member of that publisher can see the book's title and your name in its list of shared books. Where the publisher uses the dashboard, its admins and editors also see, for each shared novel:

• its title and series, and your name and email address;
• its word count, its number of chapters, and how many chapters you have marked ready;
• how many days ago it was last saved, and how many words were written in it in the last 7 days;
• whether the Delphi Engine has scanned it, who started the latest scan, and the number of findings from its latest finished scan;
• whether it is frozen, with the frozen version's code, and any freeze proposal waiting for an answer; and
• how many readers have joined its reading rounds and how many survey replies have come in, as counts.

On the same dashboard they see the words written across all the publisher's shared books in each of the last eight weeks. For each of the publisher's authors they see the author's name and email address, and how many days ago the author was last active on Mythener or, for someone who hasn't signed in yet, how long ago they were added.

If you send a submission, the publisher's admins and editors see your name, your note, and each novel's title, series and length. While it waits they can read the novels' plan and chapter text. After a decision or a withdrawal the reading ends, and the submission stays in the publisher's list with its outcome.

What members see of each other:

• A publisher's admins see every member's email address, role and the date they were added, and the email addresses of people who were removed. On the dashboard they also see each member's name, and whether someone added by email has signed in yet.
• Its editors see, on the dashboard, the names, email addresses and roles of the publisher's admins and editors, the staff assigned to each book, and its authors as described above.
• Its other members see the publisher's name, their own role, and the list of shared books with their authors' names. They don't see other members' email addresses.

Messages

Where messages are switched on:

• What we store: each conversation and who is in it; each message's text, who sent it and when; how far each person has read; who you have blocked; and any report you make, with your reason. A message from Mythener also records which member of our team wrote it. You see it as from Mythener.
• Who can see a conversation: the two people in it. The other person sees your name, not your email address. Your conversation with Mythener is read by Mythener's team.
• Reports: Mythener's team reads a conversation between two people only when one of them reports it, and only while the report is open. They then see the conversation and both people's names and email addresses. The person you block or report isn't told.

How the tools learn

• For you: when you accept, dismiss or change a suggestion (a name Mythener found, a word or a passage a check flagged), we keep that choice with your account, and the tools use it in your books from then on. You can reset what was learned in Profile › Settings.
• For everyone, without text: the same choice is also recorded as statistics: the kind of suggestion and why it was made, what you did with it, counts such as how often the word appears and in how many chapters, and the day. These records hold no text: not your writing, the names in it or your book titles. They carry a random identifier instead of your account, so they can be deleted with your account, and are pooled with other authors' to improve the tools. They're part of how the Service works and can't be turned off in the app. If you object to them, write to privacy@mythener.com. Anyone who turned this off before 14 October 2026, when it had a switch, keeps that choice.
• Never for AI training: neither record is used to train an AI model, in Mythener or anywhere else.

Information collected automatically

• Sign-in information: we sign you in through Google's Firebase Authentication: with your Google account, with a link sent to your email, or with an email address and a password. Firebase checks your password; we never see or store it. We record when you last signed in.
• Usage information: when you were last active, roughly how much time you spend in each part of the workspace, and performance measurements such as loading and sync times. We use this to improve the Service. The detailed hourly records are deleted after 35 days.
• Writing statistics: word counts, revisions and streaks, calculated from your own saved work and shown to you.
• Technical logs: our hosting provider keeps operational logs, such as requests and errors, to keep the Service running and secure. We design our logs to exclude manuscript text and access tokens.
• Rate limiting: to limit repeated requests, and to count a visit through a referral link only once, we keep a one-way hash of your IP address for up to one hour. We don't keep the IP address itself. To limit how many emails are sent to one address, or because of one person's actions, we keep a one-way hash of the email address for up to one day.
• Message limits: to limit how many messages, new conversations and reports one person sends, we keep a one-way hash of your email address for up to one day. The website chat works without signing in, so for it we keep a one-way hash of your IP address instead, for up to one day.
• Email records: when we email you a notice, we record the address it went to, what kind of notice it was, whose action caused it, when, and whether it was sent, skipped or failed. We don't keep what it said once it has gone. If you stop emails about activity, we record that choice.
• Website analytics: we use Cloudflare Web Analytics, which counts page views without cookies and without following you across sites.
• Usage recording, only if you allow it: our website, the sign-in pages and the workspace ask whether Microsoft Clarity may record how you use them: clicks, scrolling, mouse movement and the pages or screens you visit, as session recordings and heatmaps. In the workspace every word on screen is hidden from it, so it never sees your writing. On the website and the sign-in pages, what you type into forms and the chat is hidden from it. Each recording is labelled with where it was made (the website, the sign-in pages or the workspace). It stays off unless you choose Allow, and you can change your answer at any time: with Cookie settings at the foot of the website, or in Profile › Settings in the workspace. Your answer is kept in that browser, separately for our website and for the app.

Information from payment processing

When you subscribe, Stripe collects your card details, billing name and address. We never see or store your full card number. Stripe tells us your customer ID and the status, plan and renewal date of your subscription.

3. How we use it, and our legal bases

We don't sell your personal information, "share" it for cross-context advertising, show ads, or make decisions with legal or similarly significant effects about you using automated processing.

Emails we send

We email you only about the Service. We don't send marketing email.

• Notices addressed to you: for example, that you were added as an editor of a book or to a publisher, or that a publisher decided on your submission. These are part of the Service and can't be turned off. Account and billing notices will be sent the same way when we introduce them.
• Emails about activity: for example, that a submission arrived for your publisher. You can stop these with the link at the foot of each one.

Cloudflare delivers these emails for us. They contain no tracking pixels and no tracked links, and never the text of a manuscript. Sign-in links, address confirmations and password resets are sent by Google's Firebase Authentication.

4. Your writing and AI

• We never use your writing to train AI models, and we don't let anyone else do so. That holds for the Delphi Engine and for the rest of Mythener, which is ordinary code.
• Your writing is used to make the tools work better for you: what a tool learns from your choices stays with your account (section 2, "How the tools learn").
• The Delphi Engine is the only part of Mythener that uses AI. Your text is sent for AI processing only when you run a Delphi review, or turn on an automatic Delphi feature that says it does. The feature tells you what it will send.
• Delphi runs exclusively on Cloudflare Workers AI, using models that Cloudflare hosts. We choose the model based on how thorough the review is. We use only models whose terms don't allow training on your content. Your text isn't sent to any other AI provider.
• We keep the record of each review (what was checked and what it found) with your project, so you can return to it. It is deleted with your project or account.

Staff access to your writing. Our admin tools show account information such as names, emails, sign-in dates, word counts and subscription status. For a publisher they show its name, who set it up, its plan, and how many members and shared books it has. They don't show your writing or plans. Mythener staff don't view your content except:

• when you ask us to, for example for support;
• when it's necessary to keep the Service or its users secure; or
• when the law requires it.

5. Who we share it with

We share personal information only with the following.

• Service providers acting for us, under contracts that limit their use of it:
  • Cloudflare, Inc.: hosting, databases, file storage, delivering the service emails we send, AI processing for the Delphi Engine (Workers AI), security and cookieless analytics.
  • Google LLC: sign-in (Firebase Authentication), including the emails that carry a sign-in link, confirm your address or reset your password.
  • Stripe, Inc.: payments, subscriptions and tax calculation.
  • Microsoft Corporation: usage recording with Microsoft Clarity, only if you allow it.
• People you choose to share with, such as readers you invite, editors you add, and a publisher you join, share a book with or send a submission to. Section 2 says what each of them sees.
• Authorities or others when the law requires it, or to protect the rights, safety or property of our users, the public or Mythener.
• A buyer or successor, if Mythener is involved in a merger, acquisition or sale of assets. We'll tell you before your information is transferred and becomes subject to a different privacy policy.

6. Cookies and local storage

We use no advertising cookies, and no analytics cookies unless you allow usage recording.

• Sign-in cookie: one cookie (__Host-mythener-session) keeps you signed in. It's strictly necessary. It lasts up to an hour and is renewed while you use the workspace. Firebase also keeps your sign-in in your browser's storage so you stay signed in on that device.
• Invitation-link cookie: if you follow a publisher's invitation link, one cookie (__Host-mythener-join) remembers the link's code for 30 days, so that when you create your sign-in you join that publisher as one of its authors. It holds only the code.
• Referral-link cookie: if you follow an author's referral link, one cookie (__Host-mythener-ref) remembers the link's code for 30 days, so that if you create an account the sign-up is credited to that author. It holds only the code. That author then sees your first name, when you signed up and whether you have made a first payment.
• Usage-recording cookies, only if you allow it: Microsoft Clarity sets its own cookies (such as _clck and _clsk) to group the pages of one visit and to recognise a returning browser. Turning usage recording off, with Cookie settings at the foot of the website or in Profile › Settings, stops them.
• Browser storage: the workspace stores your display preferences in your browser. It remembers your answer about usage recording. It also keeps a recovery copy of any draft that fails to save, so you don't lose work. If you use the website chat, your browser keeps that conversation's key, so our answers reach you there; the email with an answer links to the same conversation. This data stays on your device and is cleared when you clear your browser's site data. On a shared computer, sign out and clear site data when you're done.

7. How long we keep it

• Account and content: for as long as your account is active.
• When you ask us to delete your account: we delete your account and content from our live systems within 30 days. Copies in our backups are overwritten within 90 days after that. We can't complete a deletion while you are the only admin of a publisher, or while one of your books is frozen by agreement with a publisher. Make someone else an admin, or agree with the publisher to unfreeze the book, first.
• Reader information: for as long as the author's reading round exists, or until the author's account is deleted or you ask us to delete your reader account.
• Editor information: the record of who was added to a book as an editor, and who was removed, is kept with the book as its history, including after you are removed. Your suggestions are kept in the author's book with the chapter's review. Both are deleted when the book or the author's account is deleted. If your own account is deleted, your address in the editor record is replaced with a placeholder. The address on suggestions you made is replaced with a placeholder too.
• Earlier editing copies: a copy of a book made for an editor under the earlier invitations is kept in that editor's account. The editor can open it to edit until the invitation ends, and it stays in their account after that, for as long as the account keeps it. Deleting the author's account doesn't delete it.
• Publisher records: a publisher's name, its membership history and its invitation links are kept for as long as the publisher is on Mythener. Removing a member or replacing a link ends it at once and keeps the record.
• Shared books and submissions: the history of a book's sharing and freezes, the publisher's plan and staff for it, and the submissions you sent are kept after you stop sharing, withdraw or are declined. They are deleted when your account is deleted.
• If a publisher's member deletes their account: their memberships are ended. Their email address is replaced with a placeholder in the records that other people keep: membership history, staff assignments, and the note of who shared, froze, planned, decided or made a link.
• Detailed usage records: 35 days.
• Rate-limiting hashes: up to 1 hour for IP addresses; up to 1 day for email addresses.
• Email records: the record of each email we sent (address, kind, time and outcome) is deleted after 90 days, or sooner with your account. Whether you stopped emails about activity is kept so that the choice holds, and is deleted with your account. Cloudflare keeps its own list of addresses that bounced or reported an email as spam, so that they aren't emailed again.
• Earlier waiting list: email addresses given to the waiting list we ran before sign-up opened are kept until you ask us to remove yours, or until an account under that address is deleted. We don't use them to send email.
• Messages: until your account is deleted. A message you delete loses its text at once. When your account is deleted, what you wrote stays in the other person's conversation under "Former member", without your name or email address, and the record of who you blocked is deleted. A report is kept after it is closed.
• Website chats: until you ask us to delete yours, by writing to privacy@mythener.com.
• What the tools learned: the choices kept for you, until you reset them or your account is deleted. The text-free statistics, until your account is deleted.
• Billing records: as long as tax and accounting laws require, usually up to 7 years. Stripe keeps its own records under its privacy policy.

We may keep information longer when the law requires it, or to resolve disputes or enforce our agreements.

8. Your rights and choices

Wherever you live, you can:

• access your information and export your work. The workspace export gives you your projects and series at any time;
• correct your account and profile details in the app;
• delete your account by emailing privacy@mythener.com;
• stop sharing a book with a publisher, or withdraw a submission that is still waiting, in your profile. A book frozen by agreement with a publisher stays shared until you both agree to unfreeze it;
• leave a publisher by asking one of its admins to remove you. Only an admin can remove a member; and
• stop emails about activity with the link at the foot of any of them. Notices addressed to you, such as a decision on your submission, are part of the Service and are always sent.

EU, UK and similar laws. You also have the right to:

• object to processing based on legitimate interests;
• restrict processing;
• receive your data in a portable format;
• withdraw consent at any time (this doesn't affect earlier processing); and
• complain to your local data protection authority.

California and other US states with privacy laws. You have the right to know, access, correct and delete your personal information. You also have the right not to be discriminated against for using these rights. We don't sell or share personal information for targeted advertising, so there's nothing to opt out of. You can use an authorised agent; we may verify your identity and their authority.

To use any right, email privacy@mythener.com from the email address on your account. We'll respond within 30 days, or sooner if your local law requires it. We may need to verify your identity first.

Readers: for feedback you gave an author, you can also contact that author directly.

Editors: you can withdraw a suggestion of your own while it is open. To stop being an editor of a book, ask its author to remove you.

9. International transfers

Mythener is based in the United States. Our providers process data in the US and other countries where they operate. When we transfer personal information out of the EU, UK or Switzerland, we rely on appropriate safeguards. These include the European Commission's Standard Contractual Clauses and the UK Addendum in our providers' data processing agreements, and providers' certification under the EU-US Data Privacy Framework where available.

10. Security

We protect your information with:

• encryption in transit;
• access controls on our systems, data and backups;
• signed, time-limited sign-in;
• private file storage with no public links to your files; and
• per-reader watermarking on protected reading pages.

No system is perfectly secure. If a breach affects your personal information, we'll notify you and the authorities as the law requires.

11. Children

Mythener is for people 18 and over. We don't knowingly collect personal information from anyone younger. If you believe a minor has given us information, contact privacy@mythener.com and we'll delete it.

12. Changes to this policy

We'll post any update here with a new effective date. For material changes, we'll tell you by email or in the app at least 30 days before they take effect.

13. Contact

Zenblis, LLC d/b/a Mythener
5900 Balcones Dr. Ste 100
Austin, TX 78731, USA
privacy@mythener.com