StoryStudio Privacy Policy

StoryStudio processes information that you provide or generate while using the service. Depending on the features you use, this may include:

• Account information, such as your email address, account identifier, authentication session information, and information necessary to maintain your StoryStudio account.
• Creative project content, including project titles, story development, manuscripts, screenplays, scenes, chapters, characters, relationships, locations, outlines, timelines, Story Bible entries, Locked Canon entries, notes, and other information you choose to save.
• Writing activity data, such as word counts, daily writing progress, project goals, chapter or scene status, editing activity, and saved writing versions.
• AI interaction data, including prompts, AI conversation history stored in StoryStudio, relevant project context used for a request, timestamps, usage counts, request limits, and technical response information returned by the AI provider.
• Connected AI provider information, including information necessary to connect and use a supported AI provider account. This may include an API credential that you intentionally provide for AI Copilot access.
• Billing and subscription information, such as your StoryStudio plan, billing interval, subscription status, Stripe customer and subscription identifiers, renewal dates, cancellation status, and plan-related StoryStudio AI usage allowance.
• Support and communications information, including the email address, support category, subject, message, request reference, account association when you are signed in, ticket status, timestamps, and limited technical anti-abuse information generated when you submit a StoryStudio support request.
• Technical and security information, which may include request timestamps, browser or device information, IP address, authentication events, error information, security signals, and similar technical metadata processed by StoryStudio or its infrastructure providers.

StoryStudio uses information for purposes reasonably related to operating, securing, supporting, and improving the service, including to:

• Authenticate your account and maintain your signed-in session.
• Save, retrieve, organize, and display your creative projects and writing.
• Provide project planning, manuscript editing, character, location, outline, timeline, continuity, Story Bible, Locked Canon, writing progress, version history, and export features.
• Generate AI responses when you intentionally use AI Copilot or another supported AI-powered feature.
• Connect your StoryStudio account to a supported AI provider when you choose to configure that integration.
• Enforce StoryStudio AI usage limits, rate limits, subscription entitlements, abuse controls, and security protections.
• Process and administer subscriptions, including plan access, renewals, cancellations, billing management, and account entitlements.
• Receive, organize, investigate, respond to, and resolve StoryStudio support requests, and protect the support system against spam or automated abuse.
• Diagnose errors, maintain reliability, prevent fraud, and protect StoryStudio and its users.
• Comply with applicable legal obligations and enforce StoryStudio policies and agreements.

AI features are optional. When you send a request to AI Copilot or another AI-powered StoryStudio feature, StoryStudio may send your prompt and relevant project context to the AI provider you have configured so that provider can generate the response you requested.

Relevant context may include portions of your story development, characters, relationships, locations, outline, timeline, manuscript, screenplay, Story Bible, Locked Canon, notes, or other project records when those records are reasonably needed for the request.

StoryStudio does not require you to use AI features in order to write or manage your project.

If you do not want project information sent to an AI provider, do not use StoryStudio features that invoke that provider.

AI responses may be inaccurate, incomplete, inconsistent, or unsuitable for publication. You remain responsible for reviewing AI-generated suggestions before relying on or incorporating them into your work.

StoryStudio uses a bring-your-own-AI-provider model for supported AI Copilot features.

You may be required to connect your own account or API credential from a supported provider, such as OpenAI.

Your AI provider relationship is separate from your StoryStudio subscription. Charges imposed by the AI provider are not included in StoryStudio subscription pricing.

StoryStudio does not control third-party AI provider pricing, usage charges, provider credits, account status, rate limits, availability, or provider billing practices.

You are responsible for monitoring your AI provider account and any charges associated with it.

When you intentionally connect a supported AI provider credential, StoryStudio processes that credential only as necessary to provide the requested AI integration.

Connected AI credentials are intended to remain on trusted server-side infrastructure rather than being exposed to other StoryStudio users.

StoryStudio encrypts connected AI provider credentials before storing them in its server-side application infrastructure.

The credential may be decrypted on trusted server-side infrastructure when necessary to send an authorized request to your configured AI provider.

StoryStudio does not display your full stored AI provider credential back to you after it has been connected.

You may disconnect a supported AI provider through StoryStudio when that feature is available. Disconnecting removes the associated provider credential from active StoryStudio integration storage, subject to reasonable backup, security, legal, or disaster-recovery retention where applicable.

You should immediately revoke or rotate a credential directly with your AI provider if you believe it has been compromised.

StoryStudio may record application-level AI usage information in order to enforce subscription limits, prevent abuse, and maintain the reliability of AI features.

This may include information such as request timestamps, project identifiers, StoryStudio plan limits, monthly usage counts, rate-limit information, and technical usage information returned by the provider.

Current StoryStudio plans may include application-level limits such as:

• Early Access: up to 500 StoryStudio AI requests per month.
• Pro: up to 1,500 StoryStudio AI requests per month.

These StoryStudio limits are separate from any billing, quotas, credits, or usage limits imposed by your AI provider.

StoryStudio uses Stripe to process subscription payments and provide billing services such as Checkout, payment method management, invoices, subscription management, and cancellation.

When you purchase a StoryStudio subscription, payment and billing details entered during Checkout are submitted directly to Stripe.

StoryStudio does not receive or store your full payment card number or card security code.

StoryStudio receives and stores limited subscription information necessary to provide paid access. This may include Stripe customer and subscription identifiers, your selected plan, billing interval, subscription status, billing period information, cancellation status, and StoryStudio entitlements associated with your subscription.

Stripe may also process information such as billing addresses, transaction information, payment method information, fraud signals, tax information, and other billing information under Stripe's own terms and privacy practices.

You may manage supported billing actions through Stripe's Customer Portal when that feature is available for your account.

StoryStudio is a paid subscription service. Creating an account does not by itself grant access to subscription-required project features.

StoryStudio may store account entitlement information necessary to determine whether your account has access to Early Access, Pro, administrative access, or no active subscription.

Ending or canceling a subscription does not automatically delete your StoryStudio account or your creative project data.

StoryStudio may restrict access to paid features after a subscription ends while continuing to retain associated account and project information according to this Privacy Policy.

StoryStudio uses service providers that process information as necessary to provide the service. Current core providers include:

• Supabase for authentication, database services, Edge Functions, and related backend infrastructure.
• Stripe for subscription Checkout, payment processing, invoices, billing management, and subscription lifecycle events.
• OpenAI or another supported AI provider when you intentionally connect that provider and use AI-powered StoryStudio features.
• Hosting and infrastructure providers used to deliver the StoryStudio application, process network requests, maintain security, and diagnose technical problems.

StoryStudio may change or add service providers as the product develops. This Privacy Policy may be updated if those changes materially affect how information is processed.

When you use a connected third-party AI provider, information transmitted to that provider is also subject to the provider's own terms, privacy practices, data-retention rules, and account settings.

StoryStudio does not control how a third-party AI provider operates its independent systems.

You should review the privacy policy and account settings of any AI provider you choose to connect.

StoryStudio does not itself use your private creative project content to train a StoryStudio-owned general-purpose AI model.

StoryStudio does not sell your manuscripts, screenplays, story ideas, project content, or personal information.

StoryStudio does not use your private creative project content for third-party advertising.

Information may be disclosed to service providers as described in this Policy, when you direct StoryStudio to perform a feature requiring that provider, or when disclosure is reasonably necessary to:

• Comply with applicable law.
• Protect legal rights.
• Prevent fraud or abuse.
• Investigate security incidents.
• Protect StoryStudio users or infrastructure.
• Enforce StoryStudio agreements and policies.

StoryStudio is designed around private, authenticated projects.

Database access controls use account ownership and entitlement rules so authenticated users can access only records they are permitted to access.

Sensitive administrative credentials, Stripe secrets, AI provider credentials, encryption keys, and other private server-side credentials are intended to remain on trusted server-side infrastructure rather than being exposed in the browser.

StoryStudio and its service providers use technical safeguards designed to protect information in transit and at rest where supported.

No online system can guarantee absolute security. You should protect your login credentials, protect connected provider credentials, and maintain offline backups of writing that is especially important to you.

Some StoryStudio preferences may be stored locally in your browser or device rather than in the StoryStudio database.

For example, StoryStudio may store writing appearance preferences such as editor font, text size, text color, layout preferences, or other interface settings on the device.

Local preferences can generally be removed by clearing the site's browser storage.

StoryStudio may also attempt to clear StoryStudio-specific local preferences after successful account deletion.

StoryStudio may create portable project backups, manuscript exports, DOCX files, PDF files, and other downloadable project materials.

Some supported exports may be generated locally in your browser or device.

Once you download or otherwise export a file, the copy stored on your device is under your control.

Files already downloaded to your device are not automatically deleted if you later delete the project or your StoryStudio account.

StoryStudio generally retains your account and project information for as long as reasonably necessary to provide the service, maintain your account, protect the platform, and satisfy legitimate legal, security, fraud-prevention, or compliance obligations.

Canceling or allowing a paid subscription to expire does not automatically delete your StoryStudio account or creative project data.

StoryStudio currently attempts to preserve project information associated with unsubscribed accounts so that retained projects may become accessible again if the account later resubscribes.

StoryStudio does not promise indefinite storage for inactive or unsubscribed accounts and may establish reasonable retention, archival, inactivity, or deletion policies in the future.

Where practical or legally required, StoryStudio may provide notice before a future retention policy materially affects stored customer project data.

When you permanently delete a project, StoryStudio removes associated active project records according to the application's deletion process.

When you permanently delete your StoryStudio account, StoryStudio initiates deletion of associated StoryStudio records that are not required to be retained for legitimate legal, billing, security, fraud-prevention, tax, dispute-resolution, or compliance purposes.

Support requests and related communications may be retained for as long as reasonably necessary to respond to the request, maintain service and security records, prevent repeated abuse, resolve disputes, and satisfy legitimate legal or compliance obligations.

Infrastructure backups, logs, disaster-recovery data, payment processor records, and similar information may remain for a period of time according to applicable retention schedules.

StoryStudio provides an account-deletion process within the application.

1. Open your StoryStudio Workspace.
2. Choose Settings to open your account-wide StoryStudio settings.
3. Choose Delete StoryStudio Account and complete the confirmation steps.

If you have an active StoryStudio subscription, StoryStudio first attempts to cancel the associated subscription so future recurring StoryStudio charges stop.

If the subscription cannot be canceled successfully, StoryStudio may stop the account-deletion process rather than delete the account while recurring billing may remain active.

After any required subscription cancellation succeeds, StoryStudio permanently deletes the authenticated account and associated StoryStudio records through the account-deletion process, subject to permitted retention described in this Policy.

Export any material you want to retain before permanently deleting your account because account deletion generally cannot be undone.

Disconnecting an AI provider is separate from deleting your StoryStudio account.

When you use StoryStudio's supported disconnect function, StoryStudio removes the connected credential from active AI integration storage.

Disconnecting the credential may prevent AI Copilot from functioning until another supported provider credential is connected.

Disconnecting an AI provider does not automatically cancel your StoryStudio subscription.

You may also revoke or rotate credentials directly through the applicable AI provider.

Depending on your location and applicable law, you may have rights concerning access, correction, portability, deletion, restriction, or objection to certain processing of your personal information.

StoryStudio provides in-product tools for certain actions such as project export, AI provider disconnection, project deletion, and account deletion.

You may also contact StoryStudio using the privacy contact listed below regarding a privacy request.

StoryStudio is not directed to children under 13 and does not knowingly seek to collect personal information from children under 13.

If you believe a child has provided personal information to StoryStudio in a manner that violates applicable law, contact StoryStudio so the matter can be reviewed.

StoryStudio and its service providers may process information in the United States or other countries where StoryStudio or its service providers operate.

Data-protection laws may differ between jurisdictions.

Where required, StoryStudio and its service providers may use legally recognized mechanisms for processing or transferring personal information across borders.

StoryStudio may preserve, access, or disclose information when reasonably necessary to:

• Comply with applicable law or valid legal process.
• Respond to lawful governmental requests.
• Protect StoryStudio users or the public.
• Investigate fraud, abuse, or unauthorized access.
• Protect the security and integrity of StoryStudio.
• Establish, exercise, or defend legal claims.

StoryStudio may update this Privacy Policy as the product, subscription model, AI integrations, service providers, legal requirements, or data practices change.

Material updates will be reflected by changing the effective date shown at the top of this page.

StoryStudio may provide additional notice when appropriate or required by law.

Questions or requests concerning this Privacy Policy or StoryStudio's privacy practices may be directed to: