Privacy policy

Version 2.5. Effective November 12, 2026. Venture Returns, 117 S Lexington St Ste 100, Harrisonville, MO 64701, operates Novel Pillar (formerly named Folio) and controls the personal information described here. Contact: help@venturereturns.com. Novel Pillar is an original writing application and is not affiliated with Ulysses or Obsidian.

Information and purpose

Novel Pillar stores manuscripts, notes, references, workflow stages, editorial guidance and reports, author decisions and navigation state to provide writing and cross-device recovery. Account identifiers and verified sign-in details establish ownership. Operational records contain request identifiers, route categories, status, timings and a hashed account identifier. They exclude manuscript text, titles, email addresses, session tokens and callback parameters.

Content storage and authentication provide the service that you request. Bounded security records protect the service from unauthorized access and help diagnose failures. Novel Pillar does not use manuscripts for advertising, model training or automated decisions about people.

Policy acceptance

Novel Pillar records your affirmative Terms agreement and Privacy acknowledgment. The record identifies the exact document versions, verified account, server timestamps and acceptance method. It contains no email, raw IP address or user agent. A material update requires a new acknowledgment before ordinary use.

You can verify an existing account to export or delete data without accepting revised terms. Workspace deletion keeps the acceptance record. Full account deletion removes acceptance records with account data.

Storage and recipients

A Cloudflare D1 database in the United States holds the authoritative workspace and revision history. Novel Pillar runs on Cloudflare Workers that Venture Returns operates directly. No writing was copied from the earlier hosting service.

Stytch handles email verification and sign-in sessions. If you connect Google Drive, Novel Pillar sends the backup content you request to Google Drive and stores an encrypted refresh credential. These providers also process information under their own policies, and they can process it in the United States.

The browser keeps a cloud-confirmed device copy and unsaved recovery drafts. Anyone with access to an unlocked browser profile can possibly read those copies. Sign-out and workspace deletion clear Novel Pillar's device copies in that browser. Other devices and downloaded exports need separate removal.

Before you sign in, writing you type as a guest is saved in this browser only. Novel Pillar does not send it to a server or to a bot check. It reaches your account only when you sign in and add it.

Analysis and Google backups

English analysis runs in a browser worker on your device. Suggestions can be incomplete or wrong, and they do not replace your review. An explicit Drive save, or an automatic backup that you turn on, sends a readable manuscript, reference bible and recovery file for that book to Google. Automatic backups wait for cloud acknowledgment and a quiet period. Failed or uncertain writes pause automatic attempts. Reports from the retired on-device editor stay in your workspace until you delete them.

Paid chapter reviews

Paid reviews are optional. When you request one, Novel Pillar sends Anthropic the selected saved chapter, the book and chapter titles, and the voice guidance, style notes and continuity references that the review uses. Novel Pillar does not send your email address or account identifiers. Anthropic returns findings, and Novel Pillar stores the resulting report in your workspace. Anthropic processes this content under its commercial API terms.

Link, a Stripe service, processes the payment and acts as the merchant of record. You enter payment details on Stripe's page, and Novel Pillar never receives your card or account numbers. To calculate tax and send receipts, Link collects details such as your name, email address, billing address and location, under Link's own privacy policy. Novel Pillar stores the order, its scope, the price, model usage and cost, Stripe payment identifiers, and payment, refund and dispute status. From Novel Pillar, Stripe receives only an order identifier and the price, never manuscript text or titles.

Yearly subscription

To apply the 1,000-word limit, Novel Pillar counts the words in your saved writing on its server. The count is a number; it is not shared with anyone. If you subscribe, Link collects your payment details, name, email address and billing location under its own privacy policy, as for paid reviews. Novel Pillar stores the Stripe customer and subscription identifiers, the subscription status and the end of the paid period. Stripe receives only a random reference for your account, never your account identity, manuscript text or titles. When you delete your account, Novel Pillar deletes its subscription record and cancels the subscription. It keeps only the Stripe subscription identifier, with no link to you, until Stripe confirms the cancellation.

Retention and deletion

Active writing stays until you delete it. Revision history keeps the latest 20 prior saves, hourly checkpoints from the last 24 hours and daily checkpoints from the last 30 days. Pruning happens on later saves. Deleting workspace data removes all kept writing, revision history, stored Drive credentials and snapshot receipts. A blank revision fence stays to stop stale devices from restoring erased content. It contains the cloud owner identifier, revision counters and a timestamp, without writing or credentials. For a directly created account, that identifier includes the former Stytch subject. This security fence has no automatic expiry.

Account deletion requires a fresh verified sign-in. It deletes the Stytch user and the linked account mapping and removes writing, except the security fence described above. An interrupted request stays blocked and queued until erasure can complete. It does not delete your Google account. Drive documents that already exist stay in your Google account, and you can remove them there.

Deletion erases the text of paid review reports. Novel Pillar keeps the financial record of each paid review (amounts, Stripe identifiers, status and dates) for accounting, disputes and any refund that the law requires. These records currently have no automatic expiry. The database provider's point-in-time recovery keeps earlier database states for up to 30 days, so deleted data can remain there until it ages out. Provider logs and backups follow the providers' own retention.

Your controls and privacy rights

Settings exports all writing and author decisions as JSON. Editing changes the authoritative content, and version history restores earlier content when you choose. Settings provides workspace deletion and account deletion. Turn off automatic Drive backup to stop future automatic transfers. Manage Google authorization in your Google account.

Novel Pillar does not sell personal information, share it for cross-context advertising or use nonessential tracking. A Global Privacy Control or Do Not Track signal does not reduce writing functions. No separate advertising opt-out is necessary, because those uses do not occur.

To use your rights of access, correction, deletion, portability, restriction or objection, use the Settings controls or email help@venturereturns.com. California guidance is available from the California Privacy Protection Agency. European guidance is available from the European Commission.

Changes

A material change to collection or use requires an updated notice before it takes effect. Revision 2.5 changes the service name from Folio to Novel Pillar, records that hosting runs directly on Cloudflare with no copied data, and adds the yearly writing subscription and the subscription records it keeps. Revision 2.4 identifies Venture Returns as operator and controller, describes the public beta and the hosting move, adds paid reviews with Anthropic, and with Link as merchant of record, states financial-record and recovery retention, and removes the retired on-device editor. Revision 2.3 adds versioned acceptance records and privacy access without new acceptance. Revision 2.2 discloses device AI inference, public model downloads and cloud editorial reports. Revision 2.1 adds the security-fence identifier and retention disclosure. Revision 2.0 replaces the October 7 private-beta notice with cloud history, device-cache, automatic-backup and independent-account deletion disclosures.

Terms and software license · Cookie and device-storage policy