Privacy Policy

1. Information We Collect

We collect the information you give us and the information created when you use Story-AI:

• Account details: your email address, and your name and profile picture if you sign in with Google
• Content you create: prompts, generated stories, bilingual versions, saved vocabulary, storyboards, generated images and videos, and images you upload
• Plan and usage records: your plan, credit balance and credit history
• Payment details, which are collected and stored by Stripe, not by us
• Technical data such as your IP address and browser type, which our hosting, analytics and advertising providers receive when you visit the site

2. How We Use Your Information

We use this information to:

• Generate the stories, translations, images and videos you ask for
• Save your content to your account so you can open and download it
• Track credits, process payments and manage your subscription
• Send account emails, such as sign-up confirmation and password resets
• Answer your questions when you contact support
• Understand how the site is used (analytics cookies, see below)
• Show ads (advertising cookies, see below)
• Prevent abuse and keep the service secure

Story-AI does not train AI models on your content.

3. Service Providers That Process Your Data

We don't sell your personal information. To run Story-AI, we send data to these providers, only as far as each one needs it:

• Google (Gemini API): your prompts and settings, and the text you ask it to continue (pasted, or from your saved stories), to write stories and pick out vocabulary
• Replicate: story text and image prompts to create storyboard images (FLUX models by Black Forest Labs) and to choose scenes (OpenAI GPT-4o), and your images and motion prompts to create videos (ByteDance Seedance)
• DeepL and Google Cloud Translation: text you convert in the bilingual reader
• Stripe: payment and billing details for subscriptions
• Supabase: account login, database and file storage
• Cloudflare R2: file storage for generated media, where enabled
• Vercel: website hosting
• Google Sign-In: your name, email address and profile picture, if you choose to sign in with Google
• Google Analytics: pages visited and device information. In the EU, EEA, UK, Switzerland, Brazil and Türkiye only if you accept analytics cookies; elsewhere unless you turn them off
• Google AdSense: pages visited, device information and your IP address, to show and measure ads, including ads based on your visits to this and other websites. In the EU, EEA, UK, Switzerland, Brazil and Türkiye only if you accept advertising cookies; elsewhere unless you turn them off
• X (Twitter): some profile pictures on our homepage load from X's servers, which receive your IP address

We may also disclose information when the law requires it, to protect our rights or the safety of our users, or as part of a merger or acquisition.

4. Who Can See Your Content

Your stories, vocabulary and account data are private to your account. Images and videos you upload or generate are stored at long, hard-to-guess web addresses so they can be displayed and downloaded. Anyone who has one of these links can open that file, so don't share links to media you want to keep private.

5. Data Security

We protect your information with measures such as:

• Encrypted connections (HTTPS) for all traffic
• Database access rules that let each account read only its own records
• Payment details handled entirely by Stripe
• Access to production systems limited to the people who need it

6. Cookies, Analytics and Ads

We use cookies and similar browser storage for:

• Essential purposes: keeping you signed in and remembering your cookie choice
• Preferences: your theme and language
• Analytics: Google Analytics. Visitors from the EU, EEA, UK, Switzerland, Brazil and Türkiye are asked first and it loads only after they accept. Elsewhere it loads by default; use the button below to turn it off
• Advertising: Google AdSense. Google and its partners use cookies to show ads based on your visits to this and other websites, and it follows the same choice as Google Analytics. You can also turn off personalized ads in Google's ad settings (adssettings.google.com) or at www.aboutads.info/choices. How Google uses this data: policies.google.com/technologies/partner-sites

You can change your choice at any time with the button below, or by clearing this site's data in your browser.

7. Your Rights and Choices

You can:

• Open and download your stories from your library
• Update your account details in Settings
• Delete your account and its content in Settings
• Refuse or withdraw consent to analytics and advertising cookies
• Email support@story-ai.org to ask for a copy of your data or for any other request about it

Depending on where you live, for example under the GDPR in the EU, the LGPD in Brazil or the KVKK in Türkiye, you may have further rights, such as objecting to processing or complaining to a data protection authority.

8. Data Retention

We keep your content and account data while your account exists. When you delete your account, we cancel an active subscription and delete your stories, storyboards, images, videos, vocabulary, credit records and login from our systems right away. Copies can remain in our providers' backups and logs for a limited time, and Stripe keeps payment records as the law requires.

9. Children's Privacy

Story-AI accounts are for people aged 13 or older. Parents can use Story-AI to create stories for their children, but children under 13 should not create an account. If you believe a child under 13 has given us personal information, contact us and we will delete it.

10. Changes to This Policy

We may update this policy when our practices, providers or the law change. We'll update the date at the top of this page, and for significant changes we'll also tell you by email or on the site.