Privacy Policy

Persona-Verse is an interactive reading platform developed and operated by Millenion Labs, a product of Millenion AB. This policy explains what personal data we collect, why we collect it, and your rights under the General Data Protection Regulation (GDPR) and Swedish data protection law.

1. Data Controller

Millenion AB
Organisationsnummer: 556887-8697
Sweden
Contact: info@millenion.se

For all data protection enquiries and exercise of rights, please use the email above. We will respond within 30 days.

2. What Data We Collect

Account data — when you register: email address, chosen display name, optional bio and favourite genres, and profile picture (if uploaded). Stored in AWS Cognito (EU region, Stockholm).

Reading progress — your position in each book (a section identifier only — no content is logged). Stored server-side in AWS DynamoDB linked to your account, and cached locally in your browser's localStorage as a fast-path read cache. The server is always the source of truth.

Visions (AI-generated images) — if you publish a Vision to the community gallery, your chosen display name and the generated image are stored in AWS S3 and DynamoDB and are publicly visible.

Patron records — if you become a Patron of the Arts, your display name, optional location, optional dedication message, and Stripe payment confirmation are stored. Payment card details are never held by Millenion AB; they are processed solely by Stripe.

Gemini API key (BYOK) — if you supply your own Google Gemini key to generate Visions without quota limits, it is stored encrypted in AWS Secrets Manager scoped to your account. It is never logged or transmitted for any purpose other than Vision generation on your behalf.

Technical access logs — AWS Lambda and Amazon CloudFront produce standard HTTP access logs (IP address, timestamp, HTTP method, path, response code). Retained for up to 30 days for security monitoring and debugging.

3. Legal Basis for Processing

• Contract performance (Art. 6(1)(b) GDPR) — account data and reading progress are necessary to provide the service you signed up for.
• Legitimate interests (Art. 6(1)(f) GDPR) — technical access logs (security monitoring, abuse prevention, platform stability) and anonymised analytics via Google Analytics (understanding how the platform is used in aggregate, to improve it). These interests are not overridden by your rights given the anonymised, aggregate nature of the analytics data and the limited scope of access logs.
• Consent (Art. 6(1)(a) GDPR) — published Visions and Patron display names, which are voluntary, publicly visible, and can be withdrawn at any time.
• Legal obligation (Art. 6(1)(c) GDPR) — Patron payment records retained for 7 years under Swedish accounting law (Bokföringslagen 1999:1078).

4. Cookies and Browser Storage

We do not use advertising cookies or ad-tracking scripts. We use Google Analytics 4 (measurement ID: G-HD3TGND66J) to understand aggregate usage — page views, session duration, and general geography. IP addresses are anonymised before transmission (anonymize_ip: true). Google Analytics sets its own cookies (typically _ga, _ga_*); these are functional/analytics cookies, not advertising cookies.

We use browser localStorage for strictly functional purposes only:

• Your reading position per book (fast-path cache; server is the source of truth)
• UI state preferences (e.g. auto-continue narration toggle, dismissed banners)
• One-time session prompts stored in sessionStorage (cleared automatically on tab close)

Strictly necessary local storage does not require consent under the ePrivacy Directive. We inform you of its use here and via the notice shown on your first visit.

AWS Cognito may use sessionStorage to hold authentication state during sign-in flows. No persistent auth cookies are set by us.

When you open the Patron of the Arts payment flow, Stripe's embedded widget may set its own cookies. These are governed solely by Stripe's Privacy Policy.

5. Data Sharing and Sub-Processors

We share data only with the following sub-processors, each operating under GDPR-adequate terms:

• Amazon Web Services (AWS) — hosting, database (DynamoDB), authentication (Cognito), CDN (CloudFront), storage (S3), secrets management. Primary region: eu-north-1 (Stockholm, Sweden).
• Stripe — payment processing for Patron of the Arts contributions. Governed by Stripe's Data Processing Agreement.
• ElevenLabs — real-time voice synthesis for character interrogation audio. Your typed questions and relevant text excerpts from the book (not personal data) are transmitted per request to generate audio responses.
• Google (Gemini API) — only when you supply your own Gemini BYOK key for Vision generation. Your key and Vision prompts are transmitted to Google's API under your own Google account terms; Millenion AB acts solely as a conduit.
• OpenAI — only when you supply your own OpenAI BYOK key for Vision generation. Your key and Vision prompts are transmitted to OpenAI's Images API under your own OpenAI account terms; Millenion AB acts solely as a conduit. OpenAI BYOK takes priority over Gemini BYOK when both are set.
• Amazon Polly — pre-generated narration audio. Public domain book text only; no personal data is transmitted.
• Google Analytics (Google LLC) — aggregate usage analytics via Google Analytics 4. Anonymised IP data and behavioural signals (pages visited, session length) are processed by Google under Google's Data Processing Terms. Google may transfer data outside the EEA under Standard Contractual Clauses. You can opt out via the Google Analytics Opt-out Browser Add-on.

We do not sell, rent, trade, or broker personal data. Ever.

6. Data Retention

• Account data — retained until you delete your account or request erasure.
• Reading progress — retained until you delete your account.
• Published Visions — retained until you delete them or your account is deleted.
• Patron records — retained for 7 years from the date of the transaction, as required by Swedish Bokföringslagen.
• Technical access logs — 30 days, then automatically deleted.
• Encrypted API keys (BYOK) — deleted when you remove the key from your account settings, or when your account is deleted.

7. Your Rights Under GDPR

As a data subject, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — correct inaccurate or incomplete data.
• Erasure — request deletion of your data ("right to be forgotten"), subject to legal retention obligations.
• Restriction — ask us to pause processing while a dispute is resolved.
• Objection — object to processing based on legitimate interests.
• Portability — receive your data in a structured, machine-readable format.
• Withdraw consent — where processing is based on consent (e.g. published Visions), withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, email info@millenion.se. We will respond within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with the Swedish supervisory authority:

Integritetsskyddsmyndigheten (IMY)
imy.se  ·  imy@imy.se

8. Security

All data is stored within AWS infrastructure in Stockholm (eu-north-1), within the EU. All data in transit is encrypted using TLS 1.2 or higher. Authentication is handled by AWS Cognito using Secure Remote Password (SRP) — your password is never transmitted to or stored by our servers. API keys are stored encrypted in AWS Secrets Manager with access controls scoped per-account.

9. Children

Persona-Verse is not directed at children under the age of 16. We do not knowingly collect or process personal data from children. If you believe a child has created an account, please contact us at info@millenion.se and we will delete the account promptly.

10. Changes to This Policy

We will notify users of material changes via a notice on the platform prior to the change taking effect. The "last updated" date at the top of this page always reflects the most recent revision. Continued use of the service after a notified change constitutes acceptance of the revised policy.

Persona-Verse is a product of Millenion Labs  ·  Millenion AB (556887-8697), Sweden  ·  info@millenion.se