Privacy Policy

1. Information We Collect

1.1 Account Information

We collect your name, email address, password, and any other details you provide when creating an account.

1.2 Payment Information

Payments are processed securely by Stripe. We do not store your full payment details on our servers.

1.3 User-Generated Content

We store content you create on the platform, including stories, drafts, notes, and prompts.

1.4 AI Usage Data

We collect the prompts, inputs, and outputs you generate when interacting with our AI features. These may be used for:

• Service improvement
• Debugging
• Model refinement (through third-party providers like OpenAI)

1.5 Analytics and Technical Data

We collect device information, browser type, IP address, interactions, and page views using services like Google Analytics, as well as logs generated by our hosting providers (AWS and Vercel).

1.6 Cookies

We use cookies and similar technologies for functionality, analytics, and improving your experience.

2. How We Use Your Information

We use the data we collect to:

• Provide, maintain, and improve Storiando
• Personalize your experience and writing assistance
• Enable AI-powered features
• Process payments and manage subscriptions
• Communicate updates, support, and service notices
• Ensure platform security and prevent misuse

3. How AI Providers Process Your Data

We use OpenAI to power some of our AI features. This means your prompts and generated content may be sent to OpenAI for processing. We do not allow third-party AI providers to train on your content unless they already comply with strict privacy controls.

In some cases, authorized Storiando staff or contractors may review anonymized or limited content to improve quality and resolve issues.

4. How We Share Your Information

We share data only when necessary to provide the service. This includes:

• Stripe — payment processing
• Google Analytics — usage analytics
• AWS & Vercel — hosting and infrastructure
• OpenAI — AI model processing

We do not sell your personal information.

5. Data Retention

• Account data & user content: kept until you request deletion.
• Logs & analytics data: retained for 1 month.

You can request account or content deletion at any time.

6. Legal Basis (GDPR)

As a company operating in Spain, we process data on these bases:

• Consent
• Performance of a contract (providing the Storiando service)
• Legitimate interest (security, service improvement)
• Compliance with legal obligations

7. Your Rights (GDPR)

You have the right to:

• Access your data
• Correct inaccurate information
• Request deletion of your account and content
• Restrict or object to certain processing
• Export your data

To exercise any right, contact us at: https://storiando.com/contact

8. Children and Minors

Storiando is accessible to minors, but users under the legal age of consent in their region should use the platform with parental or guardian permission.

We do not knowingly collect sensitive personal data from minors beyond what is necessary to operate the service.

9. Data Security

We protect your information using industry-standard measures, including:

• Encryption in transit (HTTPS)
• Encryption at rest
• Secure infrastructure provided by AWS, Vercel, and Stripe

No system is completely secure, but we work to keep your data safe.

10. International Data Transfers

Some providers we use (e.g., OpenAI, Stripe) may process data outside the EU. Transfers are protected by appropriate safeguards such as SCCs (Standard Contractual Clauses).

11. Changes to This Policy

We may update this Privacy Policy when necessary. If changes are significant, we will notify you through the platform or email.

12. Contact

If you have questions or privacy requests, visit: storiando.com/contact