Privacy Policy

1. Who is responsible for your data

Stories to Software Ltd is the data controller for the personal data described here. That means we decide what data is collected and why, and we are responsible for keeping it safe.

2. What we collect and why

• Account data — your email address and login credentials, used to create and secure your account (legal basis: performance of our contract with you).
• Content you create — story ideas, Story DNA answers, screenplays, scene and shot-list output, and any files you generate, used to provide the service and let you return to your work (contract).
• Purchase records — which products you have unlocked and when, used to give you access to what you paid for (contract). Card and billing details are collected and processed by Paddle, not by us.
• Support messages — anything you send us by email, used to answer you (legitimate interests).
• Usage and technical data — IP address, device and browser information, pages viewed and error logs, used for security, fraud prevention, and fixing and improving the product (legitimate interests).
• Marketing emails — only if you ask for them, and you can unsubscribe at any time (consent).

3. AI processing of your content

To generate screenplays and shot lists we send the story details you enter to our AI model provider, which processes them on our behalf to return the output to you. We do not sell your content, and we do not publish it.

4. Who we share data with

• Merchant of Record — Paddle.com Market Ltd, for the sale of our products, payment processing, tax compliance, invoicing and refunds.
• Service providers — hosting, database and authentication providers, AI model providers, email delivery and error monitoring, all acting under contract on our instructions.
• Professional advisers — legal and accounting advisers where needed.
• Authorities — where we are required to disclose by law, or to investigate serious misuse of the service.

5. International transfers

Some of our providers are located outside the UK and EEA. Where personal data is transferred, we rely on an adequacy decision or on Standard Contractual Clauses together with appropriate additional safeguards.

6. How long we keep data

Account data and the work you create are kept while your account is open. Purchase and tax records are kept for as long as the law requires (generally six years). Technical logs are kept for a short period, normally up to 12 months. When data is no longer needed we delete or anonymise it. You can ask us to delete your account and content at any time.

7. Your rights

You have the right to access your data, correct it, delete it, restrict or object to our processing, receive a portable copy, and withdraw consent where we rely on it. Email support@storiestoscripts.com and we will respond within one month. If you are in the UK or EEA you can also complain to your supervisory authority — in the UK that is the Information Commissioner's Office.

8. Security

We use appropriate technical and organisational measures, including encryption in transit, encrypted storage, access controls and row-level database security, so that you can only reach your own content. No system is perfectly secure, but we take these obligations seriously and will notify you and the relevant regulator of a breach where required.

9. Cookies

We use essential cookies and similar local storage to keep you signed in and to keep the checkout working — without these the service cannot function. Where we use analytics or affiliate-referral cookies, they are used only to understand product usage and to credit referrals, and you can block or clear cookies in your browser settings at any time.

10. Changes to this policy

We may update this policy as the service develops. The date above shows the latest version, and material changes will be communicated by email or in the app.