Privacy Policy
Effective July 8, 2026
This Privacy Policy explains how CyberStory AI ("we", "us") collects, uses, and shares information when you use the CyberStory AI website and services (the "Service"). By using the Service you agree to this Policy.
1. Information we collect
- Account data: email address, display name, avatar, authentication provider (e.g. Google).
- Story data: prompts, choices, generated text/images/narration, custom worlds, and adventure history.
- Billing data: subscription tier, credit balance, and transaction metadata. Card details are handled directly by our payment processor and never touch our servers.
- Usage data: device, browser, IP address, referrer, pages viewed, and product events used to operate and improve the Service.
- Support messages: anything you send us through the support form or email.
2. How we use information
- Operate the Service — generate stories, save adventures, sync progress across devices.
- Process payments, credit grants, and membership renewals.
- Enforce our Terms, prevent abuse, and secure the platform.
- Improve model quality, product features, and content moderation.
- Communicate with you about your account, billing, and material product changes.
3. AI processing
Prompts and context needed to generate a turn are sent to third-party AI providers under contracts that prohibit them from using your inputs or outputs to train their public models. Generated content is stored against your account so you can revisit past adventures.
4. Sharing
We do not sell your personal information. We share it only with:
- Service providers that host our infrastructure, process payments, send email, or provide AI models — each under confidentiality and data-protection obligations.
- Legal & safety recipients when required by law, subpoena, or to protect users and the Service.
- Business transfers in the event of a merger, acquisition, or sale of assets, subject to this Policy.
5. Cookies & analytics
We use strictly necessary cookies to keep you signed in and to remember settings, and product analytics to understand aggregate usage. You can control cookies in your browser; disabling essential cookies will break sign-in.
6. Retention
We keep account, story, and billing data while your account is active and for a reasonable period afterwards to comply with legal obligations, resolve disputes, and enforce our agreements. You can delete your account at any time; on deletion we remove or anonymize your personal data except where retention is required by law.
7. Your rights
Depending on where you live, you may have rights to access, correct, delete, export, or restrict processing of your personal data, and to object to certain processing. To exercise these rights, email us at [email protected]. You also have the right to lodge a complaint with your local data-protection authority.
8. Security
We use industry-standard measures — encryption in transit, encrypted storage, role-based access, and row-level security — to protect your data. No system is perfectly secure; we cannot guarantee absolute security.
9. Children
The Service is not directed to children under 13 (or the minimum digital-consent age in your country). We do not knowingly collect personal information from such children. If you believe a child has provided us with personal data, contact us and we will delete it.
10. International transfers
We may process your data in countries other than your own, including the United States. Where required, we use appropriate safeguards such as standard contractual clauses.
11. Changes
We may update this Policy from time to time. If we make material changes we will notify you in-app or by email.
12. Contact
Questions about your privacy? Reach us at [email protected].