Privacy Policy

Last Updated: June 9, 2026

1. Scope

This Privacy Policy applies to Bot Stories and all product modes: Stories from the Cloud, Letters from the Deep, and Tales from the Stars. It explains what data we collect, how we use it, and your choices.

2. Information We Collect

• Account Data: Name, email, and authentication details (including OAuth providers).
• Profile and Content Data: Story/letter inputs, generated content, edits, favorites, and mode preferences.
• Children Story Inputs: Child name, age range, story preferences, and optional reference photos when you choose face-lock features.
• Billing Data: Subscription/payment metadata (tier, status, invoices). Full card details are processed by Stripe and not stored by us.
• Usage and Device Data: IP-derived rate-limit data, browser/session data, request logs, and feature usage events required for reliability and security.
• Email Data: Transactional email metadata for delivery and support.

3. How We Use Data

• Provide and operate the three product modes and related dashboards.
• Generate AI text and illustrations you request.
• Process payments, subscriptions, retries, and billing status.
• Send transactional emails (welcome, receipts, notifications, shared links).
• Prevent abuse, enforce rate limits, and improve reliability/security.

4. Service Providers and Processing

We use third-party processors to run core functionality:

• Supabase: Authentication, database, and file storage.
• OpenAI: Text generation and prompt processing.
• Fal.ai: Illustration generation, including optional character/photo-based flows.
• Stripe: Payment and subscription processing.
• Resend: Transactional email delivery.

Your content is sent only as needed to fulfill requested features. Each provider processes data under its own terms and privacy commitments.

5. Shared Links and Public Access

If you create a share link, anyone with that tokenized link can view the shared story or letter until the link expires or is revoked. Do not share links publicly if content is sensitive.

6. Children's Data

Tales from the Stars is intended for adults creating content for children. Accounts are for adults only — you must be at least 18 years old to sign up, and you confirm this at account creation. We do not knowingly offer direct accounts to children. If you submit child-related inputs, you represent that you are a parent/guardian or otherwise authorized to provide that information.

7. Retention and Deletion

• Generated stories, letters, and kids content are retained while your account is active, and removed when you delete your account.
• Reference photos (used for the kids face-lock feature) are kept only while your story can still be edited — so face-lock edits can re-generate illustrations — and are deleted automatically once the story's edits are used up.
• Expired share links and their tokens are purged within about 7 days of expiry.
• Webhook and event logs are retained for approximately 90 days for security and fraud-prevention, then deleted.
• You can request account deletion from account settings. Some billing records may be retained as required by law.

8. Security

We use reasonable technical and organizational safeguards, including authenticated access controls, row-level permissions, and signed storage URLs. No internet system is 100% secure.

9. Your Rights and Choices

Depending on your location, you may have rights to access, correct, delete, or export your data, and to object to certain processing. Contact us to exercise these rights.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be reflected by updating the date above and, where appropriate, with in-app notice.

11. Contact

Questions about privacy can be sent to info@botstories.ai.