StoryTool logo

Privacy Policy

Last updated: 2026-02-26

This Privacy Policy explains how Storytool ("Storytool", "we", "us", "our") collects, uses, and protects personal data when you use our website, web application, and related services, including our text-to-speech (TTS) and text-to-video tools (the "Service").

By accessing or using the Service, you agree to the practices described in this Privacy Policy. If you do not agree, you should not use the Service.

If this Privacy Policy is translated into other languages, the English version will prevail in the event of any conflict.

1. Introduction And Scope

1.1. Scope Of This Policy

This Privacy Policy applies to:

  • Visitors to the Storytool website.
  • Users who create an account and use the Service (free or paid).
  • Affiliates and partners who participate in our affiliate or referral programs.

1.2. Relationship To Other Documents

This Privacy Policy works together with:

  • Our Terms of Service, which govern your use of the Service.
  • Our Affiliate Program Terms, if you join the affiliate program.

2. Data Controller And Contact

2.1. Data Controller

  • Storytool is operated by our company based in Vietnam. For data protection purposes, we act as the "data controller" for personal data we collect and process through the Service.
  • We may rely on different local legal entities or partners to support billing, payments, and operations in various regions.

2.2. Contact Details

  • If you have any questions about this Privacy Policy or your personal data, please contact us at: Email: info@storytool.io
  • We may update our contact details from time to time and reflect changes in this Privacy Policy.

3. Data We Collect

We collect different types of information depending on how you interact with the Service.

3.1. Account And Profile Data

When you create or manage an account, we may collect:

  • Email address and login credentials (passwords are stored in hashed form).
  • Display name, username, or profile image (if you choose to provide one).
  • Your language preferences and basic account settings.

3.2. Billing And Payment Data

For paid plans and purchases, we may collect:

  • Information about your subscriptions and purchases (plan type, amount, currency, renewal dates).
  • Billing country, tax information (for example, VAT details where applicable).
  • We do not store full payment card numbers. Payment processing and card details are handled by our payment provider Polar, which processes payments on our behalf in accordance with its own Privacy Policy and Data Processing Agreement.

3.3. Usage And Technical Data

When you visit or use the Service, we may automatically collect:

  • IP address and approximate location based on IP.
  • Device type, operating system, and browser type.
  • Dates and times of access, pages viewed, and actions taken within the Service.
  • Login events, security events, and error logs.

3.4. Content Data (User Input And Generated Output)

Because Storytool is a content creation platform, we process various types of content:

User Input Content

  • Text you submit (stories, scripts, prompts, subtitles, scenario descriptions, etc.).
  • Audio you upload (including your own voice for TTS or voice cloning).
  • Any other files you upload as part of your projects.

Generated Content (AI Output)

  • Audio generated by TTS.
  • Videos, images, or thumbnails generated by the Service.
  • Captions, transcripts, or intermediate artifacts created as part of the processing.

3.5. Affiliate And Marketing Data

If you participate in our affiliate or referral programs, or come to the Service via an affiliate link or code, we may collect:

  • Information about the affiliate or partner associated with your account or purchase.
  • Referral link or code used, campaign identifiers, and basic campaign performance metrics.
  • Aggregated statistics on clicks, sign-ups, and purchases linked to affiliates.

3.6. Cookies And Similar Technologies

We may use cookies and similar technologies (or privacy-friendly tracking methods provided by our payment provider) to:

  • Keep you logged in and maintain your session.
  • Remember preferences such as language and UI settings.
  • Attribute purchases to affiliates and referral partners (with a typical window up to 60 days for affiliate attribution).
  • Measure aggregated usage and performance of the Service.

4. How We Use Your Data

We use personal data for the following purposes:

4.1. To Provide And Maintain The Service

  • To create and manage your account.
  • To process your prompts, uploads, and projects in order to generate TTS and video content as requested.
  • To provide core functionality such as project storage, export, and collaboration (if available).

4.2. To Process Payments And Subscriptions

  • To handle billing, renewals, and upgrades.
  • To provide invoices and manage taxes where required.
  • To detect and resolve payment issues, chargebacks, or disputes together with our payment provider.

4.3. To Communicate With You

  • To send service-related messages, such as account confirmations, security alerts, and billing notifications.
  • To respond to your support inquiries and requests.
  • To send product updates, tips, or marketing communications where you have opted in or where permitted by law (you may opt out at any time).

4.4. To Improve The Service

  • To analyze how the Service is used in aggregate in order to improve features, UX, and performance.
  • To test new features and perform A/B testing.
  • To identify and fix bugs, crashes, and usability issues.

4.5. To Detect, Prevent, And Respond To Abuse And Security Issues

  • We place a high priority on preventing abuse of free tiers and automated exploitation of our Service.
  • We may use personal data (including IP addresses, device information, email domains, usage patterns, and project metadata) to detect unusual or suspicious sign-up patterns and behavior.
  • Detect and prevent misuse of free plans, credit farming, or attempts to bypass fair-use limits.
  • Enforce our Terms of Service, Acceptable Use rules, and affiliate program rules.
  • Protect our infrastructure and other users from spam, fraud, and attacks.

4.6. To Comply With Legal Obligations

  • To comply with applicable laws and regulations related to accounting, tax, and data retention.
  • To respond to lawful requests from public authorities where required.
  • To establish, exercise, or defend legal claims.

5. User Content, Voice Cloning, And AI Providers

5.1. User Content And Ownership

  • You remain the owner of the content you upload and the outputs you generate, subject to our Terms of Service. You are responsible for:
  • Obtaining any necessary permissions or licenses for voices, images, or other content you upload.
  • Ensuring you do not violate the rights of others (for example, by cloning a voice without consent).

5.2. AI Providers (OpenAI, Google, Qwen, And Others)

  • To provide TTS and text-to-video features, we may send your prompts, audio, and other content to external AI providers (for example, OpenAI, Google's Gemini API, Qwen, or similar) acting as data processors on our behalf.
  • We configure these providers under settings intended to respect their safety and acceptable-use policies.
  • Limit use of your data for model training wherever such options exist for API customers.

5.3. Voice Cloning And Biometric-Like Data

    6. Legal Bases For Processing

    • Where privacy laws such as the EU/UK GDPR or similar laws apply, we rely on one or more of the following legal bases to process personal data:
    • Performance of a contract: When processing is necessary to provide the Service under our Terms of Service.
    • Legitimate interests: For purposes such as improving the Service, preventing abuse, monitoring security, and measuring usage.
    • Consent: For specific activities where we request your consent, such as certain types of cookies or email marketing.
    • Legal obligations: When we need to comply with applicable laws (for example, accounting and tax rules).

    7. Sharing And Disclosure Of Data

    We do not sell your personal data. We may share personal data with:

    7.1. Service Providers And Sub-Processors

    We use carefully selected third-party service providers to operate and support the Service, including:

    • Payment processing and billing: For example, Polar, which handles payments, invoices, and some customer information. Polar acts as a data processor and provides DPA and privacy documentation in line with GDPR and similar regulations.
    • Email and marketing tools: For example, Brevo for transactional and marketing emails, acting as a data processor based on its DPA and security measures.
    • AI model providers: OpenAI, Google (Gemini API), Qwen, and similar providers for generative models, under their API terms and privacy commitments.
    • Analytics, logging, and monitoring tools: To understand usage and maintain stability and security (for example, server logs, error tracking, or high-level analytics).
    • These providers are only allowed to process personal data on our behalf and according to our instructions, and they must implement appropriate technical and organizational security measures.

    7.2. Legal Requirements And Protection Of Rights

    • We may disclose personal data:
    • If required to do so by law, regulation, legal process, or governmental request.
    • To enforce our Terms of Service or defend our rights, property, or safety, or that of our users or the public.
    • In connection with a merger, acquisition, financing, or sale of all or a portion of our business.

    8. International Data Transfers

    • Your personal data may be processed and stored in countries other than your country of residence, including the United States, Singapore, and other jurisdictions where we or our service providers operate.
    • Where required by law, we implement appropriate safeguards for cross-border transfers, such as Standard Contractual Clauses approved by the European Commission.
    • Contractual obligations on our processors to protect data to a standard comparable to applicable data protection laws.

    9. Data Retention

    • We retain personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, or as required by law. In general:
    • Account and profile data: Kept for as long as your account is active.
    • Billing and payment data: Kept for the period required by accounting and tax laws.
    • Usage and technical logs: Typically kept for up to ninety (90) days.
    • User Content and projects: Kept while your account is active and until you delete individual projects or files.
    • We may store de-identified or aggregated data that no longer identifies you indefinitely.

    10. Cookies And Similar Technologies

    • We may use the following categories of cookies or equivalent mechanisms:
    • Essential cookies: Required to operate the Service, maintain security, and keep you logged in.
    • Affiliate/referral tracking: To attribute purchases to affiliates and partners.
    • Analytics cookies or similar (if enabled): To understand how the Service is used and improve performance.
    • Where required by law, you may be presented with a cookie banner or settings to manage your preferences for non-essential cookies.

    11. Marketing Communications

    • We may send you:
    • Service emails: Such as account verification, password resets, billing notifications, and important updates. You cannot opt out of these communications as they are necessary for the Service.
    • Marketing emails: Such as newsletters, product updates, and promotional offers, where you have opted in or where permitted by law.
    • You can opt out of marketing emails at any time by clicking the "unsubscribe" link in the email, or contacting us at info@storytool.io

    12. Your Rights And Choices

    • Depending on your location and applicable law, you may have the following rights regarding your personal data:
    • Access: To request information about the personal data we hold about you.
    • Rectification: To correct inaccurate or incomplete personal data.
    • Deletion: To delete your account and, in some cases, request deletion of personal data.
    • Restriction: To request that we restrict certain processing in specific circumstances.
    • Objection: To object to processing based on legitimate interests or to direct marketing.
    • Data portability: To request a copy of certain personal data in a structured, commonly used format.

    13. Security

    • We implement reasonable technical and organizational measures to protect personal data from unauthorized access, loss, misuse, or alteration, including:
    • Using HTTPS encryption for data in transit between your browser and our servers.
    • Storing passwords in hashed form.
    • Limiting access to personal data to authorized personnel and service providers who need it to perform their roles.
    • However, no online service can guarantee absolute security. You are responsible for keeping your account credentials confidential.

    14. Children's Privacy

    • The Service is not intended for children under the minimum age of digital consent in their jurisdiction (typically 16 years in many countries, or as defined by local law).
    • We do not knowingly collect personal data from children under this age. If we become aware that we have unintentionally collected such data, we will take steps to delete it.
    • If you are a parent or guardian and believe your child has provided us with personal data, please contact us at info@storytool.io

    15. Changes To This Privacy Policy

    • We may update this Privacy Policy from time to time. When we do:
    • We will update the "Last updated" date at the top of this page.
    • Where appropriate, we may provide additional notice (for example, via email or a notice in the app).
    • Your continued use of the Service after an updated version of this Privacy Policy has been posted constitutes your acceptance of the changes.

    16. Contact

    • If you have questions, concerns, or requests about this Privacy Policy or your personal data, you can contact us at: Email: info@storytool.io
    • We will do our best to respond within a reasonable time, taking into account the nature of your request and applicable legal requirements.