StoryChatPro Privacy & Data Policy

Effective date: [Insert launch date] Last updated: July 18, 2026

Our promise, in plain English

Your work is yours. The stories, chats, notes, and creative content you produce inside StoryChatPro are never used to train AI models — not ours, and not our AI providers'. We collect the smallest amount of information we need to run the service, we store it securely, and we never sell it.

This page explains exactly what we collect, where it lives, and how it's protected.

1. What we collect

We deliberately keep this list short.

  • Your email address — so you can log in and we can send you account-related messages (password resets, billing receipts, service updates).
  • Your password — stored as a one-way cryptographic hash. We never see or store your actual password, and neither can anyone who breaks into our database.
  • Your payment information — handled entirely by Stripe. StoryChatPro never sees, touches, or stores your credit card number, expiration date, or CVV. We only receive a confirmation that a charge succeeded and a token that lets us reference the subscription.
  • The content you create in the app — your chats, projects, and generated work. This is stored so you can come back to it. It is yours.

We do not collect: your phone number, home address, date of birth, social security number, browsing history outside the app, or any information about you from third-party data brokers.

2. How your creative work is used (and how it isn't)

It is used to: deliver the service to you — send your prompt to our AI provider, receive the response, show it back to you, and save it in your account so you can access it later.

It is not used to:

  • Train, fine-tune, or improve any AI model — ours or our providers'.
  • Show to other users.
  • Sell to advertisers, data brokers, or any third party.
  • Feed into analytics products that profile you.

Our AI providers

StoryChatPro uses two commercial AI providers to power the chat and generation features:

  • Anthropic (Claude API) — Anthropic's Commercial Terms prohibit using API inputs or outputs to train models. API logs are automatically deleted within 7 days.
  • OpenAI (GPT API) — Since March 2023, OpenAI's default policy is that API data is not used to train models. Abuse-monitoring logs are retained for up to 30 days, then deleted.

Neither provider has permission to train on your data, and we have not opted in to any data-sharing or model-improvement programs.

3. How we keep your data secure

  • Database security (Supabase with Row Level Security). Your data lives in a Supabase database protected by Row Level Security policies. In plain English: the database is set up so that when you log in, you can only see the rows that belong to you. Another user querying the same table cannot see your data — the database itself enforces it, not just the app.
  • Passwords are hashed. We store a one-way mathematical fingerprint of your password, not the password itself. Even we can't reverse it.
  • Payments are handled by Stripe. Stripe is PCI DSS Level 1 certified — the highest security standard in the payments industry. Your card details go directly from your browser to Stripe, never through our servers.
  • Encryption in transit. All traffic between your browser and StoryChatPro uses HTTPS (TLS encryption). Traffic between our servers and our AI providers is also encrypted in transit.
  • Two-factor authentication (2FA). [Once enabled] You can turn on 2FA in your account settings for an extra layer of login security. We strongly recommend it.

4. How long we keep your data

  • Your account and content: as long as your account is active. If you cancel and delete your account, your content is removed from our database within 30 days.
  • AI provider logs: Anthropic auto-deletes within 7 days; OpenAI within 30 days. Neither is used for training.
  • Payment records: Stripe retains transaction records as required by financial regulations. We keep only what we need for tax and accounting purposes.
  • Backups: encrypted database backups are retained for [Insert period — typical is 30 days] and then permanently deleted.

5. Your rights

You can, at any time:

  • See what data we have about you.
  • Correct any information that's wrong.
  • Export your creative work in a portable format.
  • Delete your account and all associated content.

To do any of the above, email us at support@storychatpro.com and we'll respond within 7 business days.

If you're in the EU, UK, or California, you have additional rights under GDPR / CCPA. The above list covers all of them; contact us and we'll help.

6. Cookies

We use only the cookies required to keep you logged in. We do not use tracking cookies, advertising pixels, or third-party analytics that profile you across the web.

7. Children

StoryChatPro is not intended for children under 13, and we do not knowingly collect information from children under 13.

8. Changes to this policy

If we change how we handle your data in any meaningful way, we'll email you at least 30 days before the change takes effect. Small clarifications (like fixing a typo) may happen without notice, but the "Last updated" date at the top will always reflect the most recent change.

9. Contact

Questions, concerns, or requests?

Email: support@storychatpro.com

We read every message and respond within 7 business days.

StoryChatPro is committed to being transparent about how we handle your data. If anything on this page is unclear, please tell us — we'd rather fix the wording than leave you guessing.