otherwise
A PLACE FOR NEW IDEAS
LEGAL

Privacy Policy

What we collect, why, who helps us process it, and the choices you have.

LAST UPDATED OCTOBER 21, 2026

1. Who we are

Otherwise (“we”, “us”) runs otherwisebook.com and decides how your personal data is used. Contact us at support@otherwisebook.com.

2. What we collect

Account data: your email address and a password (stored only as a hash by our authentication provider), plus the profile details you add, such as a display name, avatar and preferred style.

Content you create: the text you write for exercises, the images generated from it, your likes, reports and any works you choose to publish. Drafts and your private collection stay in your browser (IndexedDB and local storage) and are not uploaded unless you publish a work.

Usage data: how many images you have generated per lesson, which lessons you completed, and technical data such as a hashed form of your network address used to apply fair-use limits and prevent abuse.

Billing data: payments are handled by Paddle. We receive only a customer identifier, your subscription status and billing period dates. We never see your card number.

Cookies and similar storage: a signed cookie that counts free images for visitors without an account, session data that keeps you signed in, and local storage for your preferences. We do not use advertising cookies.

3. Why we use it

To provide the service (accounts, generation, publishing, the community feed), to manage subscriptions, to enforce limits and keep the service secure, to send you service emails such as confirmation and password messages, and to send a weekly digest of community highlights. Every digest has an unsubscribe link.

Where the law requires a legal basis, we rely on performing our contract with you, our legitimate interests in running and protecting the service, your consent where we ask for it, and legal obligations.

4. Who we share it with

We use service providers who process data for us: Supabase (database, authentication and file storage), Vercel (hosting), Google (the Gemini model that generates images from your text and settings), Cloudflare (Turnstile bot protection), Resend (email delivery) and Paddle (payments, tax and invoicing as Merchant of Record).

Works you publish are visible to other visitors. We do not sell your personal data and we do not share it for advertising.

Some providers are located outside your country, including in the United States. Where required, transfers rely on safeguards such as standard contractual clauses.

5. How long we keep it

We keep account data while your account exists. Usage records are kept as long as needed to apply limits and prevent abuse. Billing records are kept as long as tax and accounting rules require. If you delete your account, we delete or anonymise your personal data, except what we must keep by law.

6. Your choices and rights

You can ask to access, correct, export or delete your data, or object to or restrict some processing, by writing to support@otherwisebook.com. You can unsubscribe from the digest with the link in any digest email, cancel your subscription from your profile, and clear data stored in your browser from the profile page.

If you think we handle your data unlawfully, you may complain to your local data protection authority.

7. Children

Otherwise is not meant for people under 16 and we do not knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.

8. Security

We use encrypted connections, restricted access and row-level security in our database. No system is perfectly secure, so please use a strong, unique password.

9. Changes

We may update this policy. The date at the top shows when it last changed, and we will tell you about significant changes on the site or by email.