Privacy Policy

Summary. We collect what we need to run Story System: your account details, your writing, and payment status. We do not sell your data, show ads or use tracking cookies. We use service providers to operate Story System, including to analyze your writing when you import it.

1. Who is responsible

Modest Conspiracy LLC, 944 E Howard St., Pasadena, CA 91104, is the controller of your personal data. Contact privacy@story-system.com.

2. What we collect

  • Account: email address, password (stored hashed), the date you accepted our Terms, and your plan.
  • Your content: projects, scripts, notes, characters, locations, and files you import, including original files kept so you can review an import.
  • Sign-in records, including IP addresses.
  • Payments: Our payment provider handles payments. We never receive your full card number.
  • Error reports: when something breaks, technical details of the error, with personal details removed where we can.
  • Requests you send us, such as support emails or a file-format request.

We use your information for these purposes:

  • To provide Story System: We use it to provide the service, bill you, and send account and payment emails. Our legal basis is our contract with you.
  • To protect and improve the service: We use it to keep the service secure, fix errors, and improve functionality. Our legal basis is our legitimate interest in operating and improving Story System.
  • To meet legal obligations: We use it to meet duties such as keeping tax records. Our legal basis is compliance with the law.

We do not send marketing email without your consent.

4. AI processing of your writing

When you import a script, we use an AI service to analyze its content and identify story beats. The provider does not use this content to train its models and may keep it for up to 30 days for abuse monitoring. We may also use a service to extract text from scanned pages. We do not use your writing to train AI models. To find and fix import problems, authorized members of our team may review an imported file and its analysis (legitimate interests). We do not keep copies for this after you delete the import, project or account.

5. Who we share it with

We share information with service providers that help us operate Story System:

  • Hosting and storage providers process account information and writing.
  • AI and text-recognition providers process content you import.
  • Payment providers process payment and account details.
  • Email and support providers process contact information and messages.
  • Error-reporting providers process technical information about problems.
  • Font providers may receive your IP address when a page loads.

We may also disclose data if the law requires it, or to a buyer if Modest Conspiracy LLC is sold, under this policy.

6. Cookies and browser storage

We use a session cookie to keep you signed in, an optional “remember me” cookie that lasts 30 days, and browser storage for display preferences. We use no advertising or analytics cookies, so we do not show a cookie banner.

7. How long we keep it

Your account and content: until you delete them. When you delete a project or your account, it is removed from the app at once and permanently deleted 30 days later, along with your account data. Backup copies age out within 90 days after that. Unfinished PDF exports: 1 day. Sign-in IP addresses: replaced at each sign-in. Payment records: as long as tax law requires (typically 7 years). Error reports: up to 90 days.

8. Your rights

You can see, correct, export and delete your data. Most of this you can do in the app: edit your account, export a project, or delete your account. For anything else, email privacy@story-system.com and we will reply within 30 days. If you are in the EU, UK or a US state with privacy law (such as California), you also have the right to object, restrict processing, and complain to your data protection authority. We do not sell or share personal data for targeted advertising, and we will not treat you differently for using these rights.

9. Where data is processed

Story System and its providers run in the United States. When we transfer data from the EU or UK, we rely on the providers’ Standard Contractual Clauses or the EU-US Data Privacy Framework.

10. Security

Data is encrypted in transit; passwords are hashed; files are private and served only through signed, expiring links to their owner. No system is perfectly secure; we will tell you without undue delay if a breach affects your data.

11. Children

Story System is not for anyone under 16. We delete accounts we learn belong to younger users.

12. Changes

We will email you at least 30 days before a material change takes effect.

13. Contact

privacy@story-system.com, Modest Conspiracy LLC, 944 E Howard St., Pasadena, CA 91104.