Privacy Policy

How StoryPolish handles your information.

Last Updated: April 20, 2025

This Privacy Policy describes how StoryPolish ("we", "us", or "our") collects, uses, and discloses your personal information when you visit our website https://www.storypolish.com (the "Site"), use our services, or otherwise communicate with us (collectively, the "Services").

For purposes of this Privacy Policy, "you" and "your" means you as the user of the Services, whether you are a registered user, website visitor, or another individual whose information we have collected pursuant to this Privacy Policy.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree to this Privacy Policy, please do not use or access any of the Services.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the "Last updated" date, and take any other steps required by applicable law (such as providing notice or obtaining consent).

How We Collect and Use Your Personal Information

To provide the Services, we collect and may have collected over the past 12 months personal information about you from a variety of sources, as set out below. The information that we collect and use varies depending on how you interact with us.

In addition to the specific uses set out below, we may use information we collect about you to:

  • Communicate with you.
  • Provide, maintain, and improve the Services.
  • Comply with any applicable legal obligations.
  • Enforce any applicable Terms of Service.
  • Protect or defend the Services, our rights, and the rights of our users or others.

What Personal Information We Collect

The types of personal information we obtain about you depends on how you interact with our Site and use our Services. When we use the term "personal information", we are referring to information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you.

1. Information We Collect Directly from You

Information that you directly submit to us through our Services may include:

  • Basic Contact Details: Name, email address.
  • Account Information: Username, password (hashed), security questions (if applicable).
  • Payment Information: If you subscribe to paid features, information needed by our third-party payment processor (e.g., Stripe) to process payments, such as name, billing address, payment card details. We do not store your full payment card details ourselves, but may receive transaction confirmation and partial details (like card type and last 4 digits).
  • Input Content: The text and documents you upload or submit to the Service for processing ("Input Content"). You retain ownership of your Input Content.
  • Customer Support Information: Information you choose to include in communications with us (e.g., via email or support forms).

Some features of the Services may require you to directly provide us with certain information. You may elect not to provide this information, but doing so may prevent you from using or accessing these features.

2. Information We Collect through Automated Means (Usage Data & Cookies)

We automatically collect certain information about your interaction with the Services ("Usage Data"). To do this, we may use cookies, pixels, and similar technologies ("Cookies"). Usage Data may include:

  • Device Information: IP address, operating system, browser type, device identifiers.
  • Usage Details: Pages viewed, features used, actions taken, date/time stamps, referring URLs, error logs.
  • Network Information: General geographic location derived from IP address.

For detailed information about the Cookies we use, please see the "Cookies" section below.

3. Information We Obtain from Third Parties

We may obtain limited information about you from third parties, including:

  • Service Providers: Companies supporting our Site and Services (e.g., hosting, analytics).
  • Payment Processors: Our payment processors (e.g., Stripe) provide confirmation of payment and related transaction details.
  • Analytics Providers: Tools like Google Analytics help us measure traffic and usage trends (often in aggregated or de-identified form).

Any information we obtain from third parties will be treated in accordance with this Privacy Policy. We are not responsible for the accuracy of information from third parties or their policies.

How We Use Your Personal Information

We use your personal information for the following purposes:

  • Providing Products and Services: To operate, maintain, and improve the Services, process your Input Content as requested, manage your account, process payments, send service-related communications.
  • Marketing and Advertising: To send marketing communications by email about our Services (where permitted by law and subject to your opt-out rights). We do not use your Input Content for marketing.
  • Security and Fraud Prevention: To detect, investigate, or prevent fraudulent, illegal, or malicious activity, or violations of our Terms of Service.
  • Communicating with You: To provide customer support and respond to inquiries.
  • Analytics and Improvement: To understand usage patterns, monitor performance, and improve the Services.
  • Legal Compliance: To comply with applicable laws and legal processes.

Legal Basis for Processing (GDPR/UK GDPR)

If you are in the European Economic Area (EEA), UK, or Switzerland, our legal basis for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which we collect it:

  • Performance of a Contract: Processing necessary to perform our contract with you (e.g., providing the Service, processing payments).
  • Legitimate Interests: Processing necessary for our legitimate interests (e.g., security, fraud prevention, service improvement, analytics, communicating with you), provided these are not overridden by your data protection interests or fundamental rights and freedoms.
  • Consent: Where we rely on consent (e.g., for certain cookies or direct marketing), you can withdraw it at any time.
  • Legal Obligation: Processing necessary to comply with a legal obligation.

Cookies

Our Site uses Cookies. These are small text files stored on your device that help the Site function, remember your preferences, understand how you interact with the Site, and potentially support marketing efforts.

  • Essential Cookies: Necessary for core functionality (e.g., login sessions, security).
  • Performance & Analytics Cookies: Help us understand usage patterns (e.g., Google Analytics).
  • Functionality Cookies: Remember choices you make (e.g., preferences).
  • Third-Party Cookies: May be set by services we use (e.g., payment processor).

You can control and manage cookies through your browser settings. Blocking certain cookies may impact your experience and the availability of some Service features. By using our Site without adjusting your browser settings to block non-essential cookies, you consent to our use of such cookies.

We recommend implementing a cookie consent banner/tool to comply with regulations like GDPR, allowing users granular control over non-essential cookies.

How We Disclose Personal Information

We may disclose your personal information to the following categories of third parties:

  • Vendors and Service Providers: Who perform services on our behalf (e.g., hosting, payment processing, data analytics, customer support, email delivery). These providers only have access to information necessary to perform their functions and are obligated to protect it.
  • Payment Processors: To facilitate transactions (e.g., Stripe).
  • Analytics Providers: To help us understand and improve the Service.
  • Affiliates: Within our corporate group for operational purposes.
  • Legal Requirements & Rights Protection: If required by law (e.g., subpoena, court order) or if we believe disclosure is necessary to protect our rights, your safety or the safety of others, investigate fraud, or respond to a government request.
  • Business Transfers: In connection with a merger, acquisition, financing, or sale of all or a portion of our assets, your information may be transferred as part of that transaction, subject to standard confidentiality arrangements.
  • With Your Consent: To other third parties when we have your explicit consent to do so.

We do not "sell" personal information in the traditional sense. We do not share your Input Content with third parties except as necessary to provide the service (e.g., hosting provider) or as required by law.

User Generated Content

Input Content submitted for processing is treated as confidential as described herein. If we offer features allowing public posting (e.g., forums, public reviews - which we currently do not), information posted there would be public. We are not responsible for the privacy of information you choose to make public through such features.

Third Party Websites and Links

Our Site may link to third-party websites. We are not responsible for their privacy practices. Please review their policies.

Data Retention

We retain personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law (e.g., for tax, accounting, or legal requirements).

  • Account Information: Retained while your account is active and for a reasonable period afterward for administrative or legal purposes.
  • Input Content: Generally stored only temporarily to perform the service. Content you explicitly save may be retained longer, until deleted by you or upon account closure (subject to backup retention cycles). We aim to minimize retention of unprocessed input.
  • Usage Data/Logs: Retained for a period necessary for security, analytics, and service improvement (e.g., 12-24 months), often anonymized or aggregated sooner.

When we no longer need your personal information, we will either delete or anonymize it.

Security

We implement appropriate technical and organizational measures to protect your personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. However, no internet transmission or electronic storage is 100% secure. We cannot guarantee absolute security.

Children's Data

Our Services are not directed to children under 16 (or the relevant age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us to request deletion.

Your Rights and Choices

Depending on your location (e.g., EEA, UK, California), you may have rights regarding your personal information:

  • Access: Request a copy of your data.
  • Rectification: Request correction of inaccurate data.
  • Erasure: Request deletion of your data.
  • Restriction: Request limitation of processing.
  • Portability: Request your data in a machine-readable format.
  • Objection: Object to processing based on legitimate interests or for direct marketing.
  • Withdraw Consent: Withdraw consent at any time (where applicable).
  • Opt-Out Rights (CCPA/CPRA): Right to opt-out of sale/sharing for cross-context behavioral advertising (if applicable).
  • Lodge a Complaint: Complain to your local data protection authority.

To exercise applicable rights, please contact us at contact@storypolish.com. We will respond in accordance with applicable law and may need to verify your identity.

You can opt-out of marketing emails using the unsubscribe link provided in them.

International Data Transfers

Your information may be transferred to and processed in countries outside your own, including the United States, where our servers are located. We utilize appropriate safeguards (like Standard Contractual Clauses where required) for such transfers to ensure your data is protected according to standards comparable to those in your jurisdiction.

Contact Us

If you have questions about this Privacy Policy or our practices, please contact us: