Privacy Policy

Effective date: April 14, 2026

1. Introduction

Storycuts (“we”, “us”) is committed to protecting your privacy. This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, and your rights. This policy applies to the Storycuts website and Service.

2. Data We Collect

Account data

When you register, we collect your email address, name (optional), and authentication credentials. If you sign in with Google, we receive your name and email from Google.

Usage data

We record your prompts, generated scripts, video job metadata (status, duration, style), and credit usage. We do not store the raw AI-generated images or voiceovers permanently. They are uploaded to temporary storage for video assembly and then referenced by URL.

Billing data

Payment processing is handled by Stripe. We store your Stripe customer ID and subscription status. We do not store full card numbers or CVVs.

Log and telemetry data

We collect server logs, error reports (via Sentry), and aggregate analytics (via Vercel Analytics). These may include your IP address, browser type, and pages visited.

3. How We Use Your Data

  • To provide and improve the Service (generate videos, manage credits, process payments).
  • To send transactional emails (receipts, password reset, account notifications).
  • To diagnose errors and monitor service reliability.
  • To prevent fraud and enforce our Terms of Service.
  • To comply with legal obligations.

We do not sell your personal data. We do not use your prompts or generated content to train AI models without explicit opt-in consent.

4. Data Sharing

We share data only as necessary to operate the Service:

  • Supabase:database, authentication, and file storage (EU/US regions).
  • Anthropic:your prompts are sent to Claude for script generation.
  • Replicate:scene descriptions are sent to Flux Schnell for image generation.
  • ElevenLabs:narration text is sent for voice synthesis.
  • Shotstack:asset URLs are sent for video assembly.
  • Stripe:billing information is processed by Stripe under their privacy policy.
  • Sentry:error reports may include stack traces and request context.
  • Vercel:infrastructure provider; may log request metadata.

If you connect your YouTube or TikTok account, we access only the scopes required to upload videos on your behalf. OAuth tokens are stored in our database, which is protected by Supabase row-level security and TLS in transit.

5. Data Retention

  • Account data: retained while your account is active, and for 30 days after deletion.
  • Generated video files: stored in Supabase Storage for as long as your account is active. You can delete individual projects from your dashboard at any time.
  • Billing records: retained for 7 years as required by financial regulations.
  • Server logs: retained for 90 days.

6. Security

We use industry-standard security measures including TLS encryption in transit, row-level security in our database, and hashed/encrypted secrets. No method of transmission over the internet is 100% secure. Please use a strong, unique password and enable two-factor authentication where available.

7. Cookies and Tracking

We use session cookies necessary for authentication. We use Vercel Analytics for aggregate page view data. This does not use advertising cookies or cross-site tracking. We do not use third-party advertising networks.

8. Your Rights

Depending on your location, you may have rights including:

  • Access: request a copy of the personal data we hold about you.
  • Correction: ask us to correct inaccurate data.
  • Deletion: request deletion of your account and associated data.
  • Portability: receive your data in a machine-readable format.
  • Opt-out: opt out of any future marketing emails (unsubscribe link in every email).

To exercise any of these rights, email privacy@storycuts.ai. We will respond within 30 days.

9. Children’s Privacy

The Service is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently done so, contact us immediately and we will delete the data.

10. Changes to This Policy

We may update this policy. Material changes will be communicated by email or in-app notification at least 14 days before taking effect.

11. Contact

Privacy questions: privacy@storycuts.ai