1sutra
Privacy Policy
Last updated: 2026-10-20
In one paragraph
What you write is used only to write your book and answer your questions. It is not used to train models, not sold to anyone, and not used for advertising. You can delete all of it at any time.
The party responsible for this data is 1sutra; contact hello@1sutra.com.
What we collect
What you write: the hard things and experiences you write on /start, the optional background (age range, life events, line of work), your preferences (language of the book, your relation to the Diamond Sutra, how to address you, people or things to leave out), the questions you ask, and the rating and sentence you may leave after reading.
Account and payment: your email. Stripe collects your card number; we never see it and receive only the result of the payment.
Technical: the essential cookies listed below; one-way digests of IP address and email used to limit abuse; usage events (for example “saved a story”, “downloaded the PDF”: a type and numbers, never your words); access logs from our hosting providers.
We do not collect your real name, date of birth, ID numbers or location.
Sensitive information
What you write may touch on health, faith, family and the loss of people you love. Many laws treat this as sensitive information. We process it only with your explicit consent: before you start writing on /start the page says so, and writing and saving is your consent.
You can withdraw consent at any time by deleting what you wrote or your whole account. Withdrawal does not affect processing already done before it.
Why we process it, and on what basis
Writing the book, answering questions, signing in and delivery: to perform our agreement with you.
Processing the sensitive things you write: your explicit consent.
Crisis check: every passage you write is checked automatically for signs of danger; if there are any, the page turns to help resources and no payment is taken. This is for your safety; the result decides only whether production continues and is used for nothing else.
Preventing abuse and fraud (rate limits, card testing): our legitimate interest in keeping the service safe.
Keeping payment and refund records: legal obligations on tax and payments.
Who processes your data
These providers process data only on our instructions and not for their own purposes:
Vercel: hosts the site and produces access logs. Supabase: database and file storage. Anthropic: the AI model that writes the book and answers your questions; under its commercial terms, data sent through its API is not used for training and is kept for at most 30 days. OpenAI: a backup AI model API, used only if we switch to it, with storage turned off (store: false) and no training. Inngest: schedules book jobs and receives only order and book ids. Browserless: lays the book out as a PDF. Stripe (including Link): payments. Resend: sends sign-in links, book-ready, refund and deletion emails, and one follow-up email a week after your book arrives; no marketing email. Zoho: our inbox, which receives what you write to hello@1sutra.com.
1sutra's operator looks at your content only when you report an error, when a book needs a human check, or when you write and ask us to. We do not sell or share your data with anyone for advertising.
Where it is stored, and transfers
Data is stored in the eastern United States (Virginia). If you live outside the US, your data is transferred to the US to be processed. For readers in the European Economic Area and the UK, these transfers rely on the Standard Contractual Clauses offered by our providers. For readers in mainland China and Taiwan: your data is processed outside your region (in the US), for the purposes, in the ways and by the providers described on this page, and you can use the rights below.
How long we keep it
Answers written without signing in or paying: deleted after 7 days. Signed in: kept in your account until you delete it.
Your book, what you wrote and your questions and answers: kept until you delete them. Use “Delete all my data” in My Book and they are physically deleted within 24 hours.
Inputs and outputs of AI model calls (stored encrypted, to investigate problems): cleared after 90 days, leaving only usage, version and time.
Usage events: deleted after 400 days. Rate-limit digests: deleted after 2 days.
Payment and refund records: kept by Stripe as the law requires; we keep only the order number, amount and status.
How we protect it
What you write, your email and the personal parts of your book are encrypted in the application before they reach the database, each bound to the place it is stored so it cannot be moved; emails are looked up by a one-way digest. Only our servers can reach the database. The site loads no third-party analytics or advertising scripts. No system is perfectly secure; if a breach affects your data, we will tell you as soon as the law requires.
Your rights
You can: see and download your data; correct it; delete it; withdraw consent; object to or restrict some processing; and receive your data in a common format. In My Book you can download and delete directly; for anything else write to hello@1sutra.com. We answer within 30 days, free of charge.
We do not sell your personal information or share it for targeted advertising, so there is no sale or sharing to opt out of.
You may also complain to the data protection authority where you live.
Minors
The service is for people 18 or older. If we find an account belongs to a minor, we delete it.
Changes
When this page changes, its date is updated; important changes are announced on the site and emailed to readers who have an account.
Version history
2026-10-20: added consent for sensitive information, legal bases, every provider, the 90-day retention of AI call records, cookies, transfers and your rights; removed Slack and preferences no longer used.
2026-10-14: first version.