Privacy Policy

1. Data We Collect

We collect the following when you use Storia:

• Account data: email, display name, preferred name, pronouns, persona description, and boundaries you set
• Characters you create: name, personality, backstory, scenario, example dialogues, and avatar
• Conversations and messages: the full content of your chats with characters
• Memories: facts the system summarizes from conversations so a character can remember you
• Age verification and related mature-content history (append-only, cannot be edited)
• Billing data: your plan status and Stripe reference IDs (we never store your card number ourselves)
• Basic technical data used to enforce usage quotas and prevent abuse

2. How We Use Your Data

We use your data to provide the core service (generating AI character responses, showing conversation history), enforce quotas and safety rules, process payments, and respond when you contact us for support. We do not sell your data to third parties.

3. AI Processing

When you send a message, that message — along with relevant character data (personality, scenario) and your mature-content status — is sent to an external AI processing provider to generate a response. Our current provider is MaxPlus AI, which routes requests to a configured underlying language model (e.g. Claude, GPT, or another model depending on current configuration). We do not authorize using your private conversations to train models or for any purpose beyond generating your response, without separately asking for your consent — the exact data-handling terms of the underlying provider are governed by that provider's own agreement.

4. Data Retention

We keep your data for as long as your account remains active. When you delete your account, your characters, conversations, messages, and memories are permanently deleted immediately. We do not currently have an automatic time-based deletion policy for active accounts.

5. Data Encryption

Your messages and memories are currently stored as plain text in our database, protected by row-level access controls (Row Level Security) that only allow the account owner to access their own data. We do not currently encrypt this data at the storage layer.

6. Your Rights Over Your Data

You can edit your profile data yourself via the Profile and Settings pages, and delete your account along with all its data at any time via Settings. We do not currently offer an automated data export tool — to request a copy of your data, contact us at [contact email].

7. Third-Party Processors

We use the following third-party services to operate Storia:

• Supabase — database, authentication, and image storage
• Vercel — hosting and running the web application
• MaxPlus AI — processes conversation messages to generate AI character responses
• Stripe — processes payments (currently in test mode, not yet live)

8. Staff Access to Your Data

Our team does not routinely access your private conversations or memories. Access to private data for troubleshooting or support only happens when genuinely necessary, through an owner-approved process, and is logged for audit purposes.

9. Children's Privacy

Storia requires users to be at least 18 years old. We do not knowingly collect data from anyone below this age. If we learn we've inadvertently collected data from a minor, we will delete that data and suspend the associated account immediately.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be announced in the app or by email.

11. Contact Us

Questions about this Privacy Policy can be sent to [contact email].