Privacy Policy

Last updated: April 21, 2026

STORYSPUN LLC PRIVACY POLICY Effective Date: April 21, 2026

StorySpun LLC ("StorySpun," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website and services (collectively, the "Services"). Please read this policy carefully. By using the Services, you consent to the practices described herein.

This Privacy Policy applies to residents of all jurisdictions, including the United States, the European Union, the United Kingdom, and other regions with applicable data protection laws. Where specific rights or requirements differ by jurisdiction, those are described in the applicable sections below.

1. Data Controller

StorySpun LLC is the data controller responsible for your personal information.

Contact: customersupport@storyspun.ai Jurisdiction of formation: Ohio, United States

2. Information We Collect

2.1 Information You Provide Directly

We collect the following categories of personal information that you provide to us:

Account information: your name and email address, collected at registration
Payment information: billing details processed by Stripe, Inc. on our behalf. StorySpun does not store full payment card numbers
Taste Profile information: your literary preferences, favourite titles, content preferences, content to avoid, genre preferences, preferred language, and personal context you choose to share for story generation purposes
Order information: your commissioned Story format, credits used, and order history
Marketplace information: if you list a Story, information associated with your listing and payout preferences
Communications: messages you send to us via our contact form or support channels

2.2 Information We Collect Automatically

When you use the Services, we collect certain information automatically through our internal systems:

Log data: IP address, browser type, pages visited, and timestamps
Usage data: feature interactions, order status events, and pipeline audit logs for operational and quality purposes
Session information: authentication tokens and session identifiers

We do not use third-party advertising trackers, social media pixels, or behavioral advertising technologies on our platform.

2.3 Information from Third Parties

We receive limited information from the following third-party service providers in the course of operating the Services:

Stripe, Inc.: payment confirmation, transaction identifiers, and Stripe Connect account status for marketplace creators
Anthropic PBC, OpenAI, and fal.ai: these providers process your Taste Profile content to generate your Story. Please refer to Section 5 (Third-Party Service Providers) for further detail

2.4 Special Category Data

We do not intentionally collect special category data (including health information, racial or ethnic origin, religious beliefs, sexual orientation, or biometric data) through our Services. Our Taste Profile is designed to collect literary preferences and general personal context only.

You should not submit special category data through your Taste Profile. If you choose to do so, your submission constitutes your explicit consent to processing of that data for the sole purpose of generating your Story, in accordance with Article 9(2)(a) of the UK/EU GDPR where applicable.

3. How We Use Your Information

3.1 Legal Bases for Processing (EU/UK Users)

For users in the European Union and United Kingdom, we process your personal data on the following legal bases under the UK/EU General Data Protection Regulation (GDPR):

Contractual necessity (Article 6(1)(b)): processing your account information, Taste Profile, and payment information to fulfill your Story order and deliver the Services you have purchased
Legitimate interests (Article 6(1)(f)): internal analytics, fraud detection, platform security, service improvement, and operating our administrative systems, where those interests are not overridden by your rights
Consent (Article 6(1)(a)): marketing communications, where you have opted in
Legal obligation (Article 6(1)(c)): retaining transaction records as required by applicable law

3.2 Purposes of Processing

We use the information we collect to:

Create and manage your account
Process your orders and deliver generated Stories, cover art, and audiobooks
Process payments and manage credits
Operate the StorySpun Library and process marketplace transactions and creator payouts
Send transactional communications: order confirmations, delivery notifications, audiobook completion notices, and payout notifications
Send subscription renewal reminders and cancellation confirmations
Detect, prevent, and investigate fraud, abuse, and Terms of Service violations
Improve the quality of our AI pipeline and services through internal analysis of aggregate, de-identified usage patterns
Comply with applicable legal obligations
Send marketing communications where you have consented

4. How We Share Your Information

We do not sell your personal information. We share your information only in the following circumstances:

4.1 Third-Party Service Providers

We share personal information with service providers who process data on our behalf, subject to appropriate data processing agreements:

Stripe, Inc. (payment processing and marketplace payouts) — privacy.stripe.com
Anthropic PBC (AI story generation) — your Taste Profile content is transmitted to Anthropic's API for processing. Anthropic's API usage policies govern how they handle API inputs
OpenAI (audiobook TTS synthesis) — chapter text is transmitted to OpenAI's API for voice synthesis where you have commissioned an audiobook
fal.ai (cover art generation) — story metadata is transmitted for image generation
Cloudflare (storage and content delivery for PDFs, cover art, and audiobook files)
Resend (transactional email delivery)
Railway (cloud hosting infrastructure)

4.2 Marketplace Listings

If you elect to list your Story in the StorySpun Library, your Story will be made available to other users for download. Your personal identity is not displayed in connection with your listing unless you affirmatively choose to identify yourself.

4.3 Legal Requirements

We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of StorySpun, our users, or the public.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of StorySpun's assets, your personal information may be transferred as part of that transaction. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

5. Data Retention

We retain your personal information for as long as your account is active or as necessary to provide the Services and fulfill the purposes described in this policy. Specifically:

Account information is retained for the duration of your account and for a reasonable period thereafter to comply with legal obligations
Order information, including generated Stories and Taste Profiles, is retained for the duration of your account
Payment transaction records are retained for a minimum of seven years as required by applicable financial recordkeeping law
Audit logs and pipeline records are retained for operational and legal purposes for a minimum of two years

You may request deletion of your account and associated personal data at any time, subject to our obligations to retain certain records under applicable law. See Section 7 for your rights.

6. International Data Transfers

StorySpun is based in the United States. If you are accessing our Services from the European Union, United Kingdom, or other regions with laws governing data transfer, please be aware that your information may be transferred to and processed in the United States, which may not provide the same level of data protection as your home jurisdiction.

For transfers of personal data from the EU/UK to the United States, we rely on the following transfer mechanisms where applicable:

Standard Contractual Clauses (SCCs) approved by the European Commission or UK equivalent, incorporated into our agreements with relevant service providers
The EU-U.S. Data Privacy Framework and UK equivalent, where our service providers are certified

By using the Services, EU/UK users consent to the transfer of their personal data to the United States subject to these safeguards.

7. Your Privacy Rights

7.1 All Users

Regardless of your location, you have the right to:

Access the personal information we hold about you
Correct inaccurate personal information
Request deletion of your account and personal data, subject to legal retention obligations
Opt out of marketing communications at any time via the unsubscribe link in any marketing email or by contacting us

7.2 EU and UK Users (GDPR Rights)

If you are located in the European Union or United Kingdom, you have the following additional rights under the GDPR:

Right to data portability: receive your personal data in a structured, commonly used, machine-readable format
Right to restrict processing: request that we limit how we use your data in certain circumstances
Right to object: object to processing based on legitimate interests
Right to withdraw consent: where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing
Right to lodge a complaint: with your local supervisory authority (for EU users, the relevant national data protection authority; for UK users, the Information Commissioner's Office at ico.org.uk)

We will respond to verified rights requests within 30 days (or within one month as required under GDPR). In complex cases we may extend this period by a further two months with notice.

7.3 California Users (CCPA/CPRA Rights)

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) provides you with the following rights:

Right to know: request disclosure of the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purpose for collection, and the categories of third parties with whom we share it
Right to delete: request deletion of personal information we have collected, subject to certain exceptions
Right to correct: request correction of inaccurate personal information
Right to opt out of sale or sharing: StorySpun does not sell or share personal information for cross-context behavioral advertising
Right to limit use of sensitive personal information: we do not use sensitive personal information for purposes beyond those permitted under the CPRA
Right to non-discrimination: we will not discriminate against you for exercising your CCPA rights

To submit a CCPA rights request, contact us at customersupport@storyspun.ai. We will verify your identity before processing your request.

8. Security

We implement industry-standard technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These measures include encrypted data transmission (TLS), access controls, and secure cloud storage.

No method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security, and we encourage you to use strong, unique passwords and to notify us immediately if you suspect unauthorized access to your account.

9. Children's Privacy

The Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected information from a minor, please contact us at customersupport@storyspun.ai and we will delete that information promptly.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and by posting the updated policy on our website with a new effective date. Your continued use of the Services after the effective date of the updated policy constitutes your acceptance of the changes.

For EU/UK users, where changes involve a new purpose for processing or a new legal basis, we will seek fresh consent where required.

11. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have a data protection concern, please contact us at:

StorySpun LLC Email: customersupport@storyspun.ai

For EU/UK users, you also have the right to contact your local data protection authority if you are not satisfied with our response to a privacy concern.