Privacy Policy

Our Privacy Promise

At StoryBound, we believe family memories deserve careful handling. We treat your personal stories and family history as private material for a family edition, not as content to mine or resell. This document outlines how we protect, honor, and secure the moments you entrust to us. We promise to never sell your personal stories to third parties.

2. Information We Collect

2.1 Personal Information

We collect personal information that you provide to us, including:

• Name and email address
• Physical-edition launch interests when you join a waitlist
• Shipping address (for physical book orders)
• Phone number (optional)
• Payment information (processed securely by Stripe)
• Story content and memories you share with us

2.2 Automatically Collected Information

Our service and security systems may automatically process:

• IP address and browser type
• Device information and operating system
• Technical logs needed to operate and protect the service
• Pages visited, referral source, and interactions only when you allow analytics

3. How We Use Your Information

We use your information to:

• Create and deliver your personalized story books
• Process your payments and fulfill orders
• Send order confirmations and delivery notifications
• Send the physical-edition launch update you explicitly request
• Respond to your inquiries and provide customer support
• Improve our services and develop new features
• Detect and prevent fraud or abuse
• Comply with legal obligations
• Send marketing communications (with your consent)

4. Third-Party Services

We use the following third-party services to operate our platform:

4.1 Google Gemini

We use Google's Gemini services to help transform your memories into stories and create illustrations. Your story content is processed by Google according to their privacy policy.

4.2 Stripe

Payment processing is handled by Stripe. We do not store your credit card information. Stripe is PCI-DSS compliant and maintains the highest security standards.

4.3 Supabase

We use Supabase for database and file storage. Your data is encrypted at rest and in transit.

4.4 Resend

We use Resend to send transactional emails such as order confirmations and book delivery notifications. If you explicitly join a physical-edition waitlist, Resend may also deliver that requested launch update. Every launch message will include a straightforward way to stop future messages.

4.5 Google Analytics

Google Analytics is optional. It helps us understand which pages and journeys make StoryBound easier to use. We do not load Google Analytics or send analytics events until you choose Allow analytics. When enabled, StoryBound events may include a redacted page path, page title and referrer, reader age range, illustration style, edition type, price, currency, fixed intent or placement labels, file type, a broad checkout setup or submission stage, and whether key homepage, creation, or review actions were reached or selected. A verified purchase may include the confirmed StoryBound order ID as the analytics transaction ID. We override page URLs, titles, and referrers so checkout queries, private book tokens, and story titles are not included. Google Analytics also automatically receives standard web-stream metadata such as language, screen resolution, session identifiers, and browser or device request information. StoryBound does not add story text, names, email or postal addresses, payment credentials, raw error messages, private tokens, raw viewport measurements, or user-agent strings to custom analytics event fields.

5. Cookies and Tracking

We use essential browser storage to provide features you request, protect the service, remember functional preferences, and preserve work in progress. If you allow analytics, Google Analytics may also use cookies and similar technologies to:

While you create, unfinished interview text and book choices may be saved in session storage for the current tab so a refresh or back navigation does not erase your work. This recovery draft is not sent to analytics and is normally removed when the tab is closed. You can also remove it through your browser settings.

• Understand how you use our site
• Improve site performance and user experience
• Track conversions and measure marketing effectiveness

You can reject analytics without affecting story creation, checkout, orders, or account access. Use the Privacy choices control available on every page to allow analytics, keep it off, or withdraw permission later. When you withdraw permission, StoryBound stops sending analytics events and removes accessible Google Analytics cookies from this browser. You can also control storage through your browser settings.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit and at rest
• Secure authentication and access controls
• Regular security audits and updates
• Limited access to personal information

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations. Story content and generated books are stored indefinitely to allow you to access your orders. Physical-edition waitlist records are kept for no more than 18 months without a launch. After the requested launch update is sent, we remove the record within 90 days unless you separately choose to hear more. You can ask us to remove your email at any time.

8. Your UK and EEA Data Rights

If you are in the United Kingdom or European Economic Area, you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate information
• Right to Erasure: Request deletion of your data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing of your data
• Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at support@storybound.store

9. Children's Privacy

Our services are intended for adults. We do not knowingly collect information from children under 13. If you believe we have collected information from a child, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. Continued use of our services after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us: