Privacy Policy

1. Who we are

StoryLab by VOKVI operates storyevery.day from Indonesia. For privacy questions or requests, contact bassgene88@gmail.com.

2. Information we process

• Account data, including email address, display name, authentication identifiers, and profile information provided by Google or another sign-in provider.
• Content you provide, including photographs, project names, instructions, text, layouts, templates, and exported project settings.
• Service data such as device, browser, language, approximate location derived from IP, security logs, errors, and feature usage.
• Subscription and transaction status. Paddle processes payment details; StoryLab does not store your full card number.
• Messages you send to support.

3. How we use information

We use information to authenticate users; create and synchronize projects; provide AI-assisted analysis and writing; process subscriptions and control access; prevent abuse; troubleshoot and improve StoryLab; communicate about the service; and comply with legal obligations.

4. Service providers

We use service providers including Supabase for authentication, database, and project storage; Google for optional sign-in; OpenAI for AI-assisted analysis and generation when you request it; Paddle as merchant of record and payment provider; and Cloudflare for hosting, delivery, and security. These providers process information under their own terms and privacy commitments.

When AI generation is requested, reduced copies of selected images and your instructions may be transmitted to OpenAI. Original local files remain on your device unless you save or upload a project to cloud storage.

5. Legal bases and international processing

Depending on applicable law, we process data to perform our contract with you, based on legitimate interests in operating and securing the service, with consent where required, and to meet legal obligations. Providers may process data in countries other than yours, subject to their transfer safeguards.

6. Retention

Account and cloud-project data is kept while your account is active and for a reasonable period needed for recovery, security, accounting, dispute resolution, or legal compliance. You can delete individual projects in StoryLab and request account deletion by email. Payment records may be retained by Paddle as required by tax and financial law.

7. Your choices and rights

You may request access, correction, export, or deletion of personal data, object to or restrict certain processing, and withdraw consent where processing relies on consent. Rights vary by location. We may need to verify your identity before completing a request.

8. Security and children

We use reasonable technical and organizational safeguards, but no internet service can guarantee absolute security. StoryLab is not directed to children under 13, and local law may require a higher minimum age.

9. Updates

We may update this Policy as the service changes. The current version and effective date will remain available on this page.