Privacy Policy

1. Introduction

This Privacy Policy explains how LongStories.ai ("LongStories," "we," "us," or "our") collects, uses, shares, and protects information when you use https://longstories.ai, our AI video creation tools, account features, payment flows, and related services.

For users in the European Economic Area, United Kingdom, and Switzerland, LongStories is the controller of personal data described in this policy unless a feature states otherwise.

2. Data We Collect

• Account data, such as your name, email address, authentication provider, account settings, subscription status, and support requests.
• Creator and project data, such as prompts, scripts, characters, images, audio, videos, generated outputs, project settings, and other content you upload or create.
• Payment and billing data processed by Stripe, such as customer identifiers, checkout status, subscription details, invoices, payment method metadata, and tax or billing information where applicable.
• YouTube data, such as channel information, authentication tokens, upload status, scheduled post metadata, and other information needed when you connect a YouTube account.
• Technical data, such as IP address, device and browser type, pages viewed, referring URLs, timestamps, session identifiers, error logs, and security or fraud-prevention signals.
• Cookie and similar technology data, including consent preferences, authentication cookies, analytics identifiers, advertising identifiers, affiliate referral identifiers, and marketing attribution parameters where permitted.

3. How We Use Data

• To create, edit, store, render, and deliver AI-generated videos and related assets.
• To operate accounts, authentication, subscriptions, credits, checkout, invoices, refunds, and customer support.
• To provide integrations you request, including YouTube channel uploads and related Google API features.
• To maintain security, prevent abuse, detect fraud, debug errors, and enforce our Terms of Service.
• To understand product performance and improve the Service, when analytics consent is granted where required.
• To measure ads, attribute campaigns, personalize ads, and operate affiliate/referral programs, when marketing consent is granted where required.
• To comply with legal obligations and maintain records of legal acceptance, consent choices, payments, and account activity.

4. Legal Bases for EEA, UK, and Swiss Users

Where GDPR-style laws apply, we rely on the following legal bases:

• Contract: to provide accounts, subscriptions, credits, generation features, payments, support, and integrations you request.
• Legitimate interests: to secure the Service, prevent abuse and fraud, debug issues, improve reliability, respond to support requests, and understand business performance in ways that do not override your rights.
• Consent: for optional analytics cookies, advertising cookies, ads personalization, certain marketing communications, and connected third-party integrations where consent is required.
• Legal obligation: to keep records, respond to lawful requests, handle tax/accounting obligations, and comply with applicable law.

5. AI Processing

To provide AI generation features, we may send prompts, scripts, uploaded media, selected project settings, and generated outputs to AI model, media generation, rendering, storage, and infrastructure providers. These providers process the data to deliver the requested feature, operate their services, apply safety systems, troubleshoot issues, and comply with their legal obligations. Do not submit content that you do not have the right to use.

6. YouTube API Services

7. Cookies, Consent, and Similar Technologies

8. Data Sharing and Service Providers

We do not sell or rent your personal data. We share data with service providers only as needed to operate, secure, improve, and market the Service, process payments, comply with law, or provide integrations you request.

• Infrastructure, database, storage, authentication, and hosting providers, including Supabase, AWS, Cloudflare, and related infrastructure providers.
• Payment and billing providers, including Stripe.
• AI, media generation, rendering, transcription, and model providers used to generate or process requested content.
• Email, support, notification, monitoring, logging, and error-reporting providers, including Resend and Sentry.
• Analytics providers, including Google Analytics, PostHog, DataFast, and Ahrefs, when analytics consent is granted where required.
• Advertising and measurement providers, including Google Ads, Google Tag Manager, and Meta, when marketing consent is granted where required.
• Rewardful, our affiliate provider, which records the affiliate link that brought you to the Service so we can pay referral commissions.
• Google and YouTube API services when you connect or use Google-powered integrations.

9. Data Retention

• Account, project, and generated content data is retained while your account is active or as needed to provide the Service, unless you delete it or request deletion where available.
• Payment, invoice, fraud-prevention, and tax records may be retained as required by law and business recordkeeping obligations.
• YouTube channel data is automatically refreshed periodically, and you can revoke access through your Google account settings.
• Cookie consent preferences are generally retained for up to 180 days, consent records are retained as needed to demonstrate compliance, and marketing attribution cookies are generally retained for up to 90 days unless cleared sooner.
• Security logs, diagnostics, and backups may be retained for a limited period needed to operate, secure, debug, and recover the Service.

10. Your Choices and Rights

11. International Transfers

We and our service providers may process and store information in the United States and other countries. Where required, we rely on appropriate transfer mechanisms such as standard contractual clauses, data processing agreements, or other lawful safeguards.

12. Children's Privacy

The Service is intended for parents, guardians, educators, creators, and other adults or authorized users, not for direct use by children under 13. We do not knowingly collect personal data from children under 13 or the minimum age required by local law directly from a child. Parents, guardians, or authorized users may submit content that includes a child only when they have the rights and permissions needed to do so. If you believe we have received data from a child without appropriate permission, please contact us immediately.

13. Security

We use reasonable technical and organizational measures designed to protect your data. However, no method of transmission or storage over the internet is completely secure, and we cannot guarantee absolute security.

14. Changes to This Policy

We may revise this Privacy Policy from time to time. If we make material changes, we will update the date above and provide additional notice where required.

15. Contact Information

If you have questions or concerns about our Privacy Policy, please contact us:
Email: [email protected]
Help Center: LongStories Help Center