Privacy Policy

StoryHack Technologies LLC · Effective May 18, 2026

StoryHack Technologies LLC (“StoryHack,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services, including our writers' room documentation and First Read AI creative voice profiling tools (collectively, the “Service”).

1. Information We Collect

We collect information from you in several ways:

A. Account Information. When you create a StoryHack account, we collect your name and email address. This information is necessary to establish your account and provide service access.

B. Voice Profile Data. Our First Read tool begins with a creative voice profiling interview. We collect:

  • Your responses to the voice profiling interview questions
  • The generated Voice Profile document (a comprehensive summary of your creative voice, preferences, and tendencies)
  • Your Process Profile (reflective analysis of how you work)

C. Creative Content. You may upload creative materials to your account, including beat sheets, outlines, scripts, and other story materials. We store this content to provide the Service and allow you to access your work across devices.

D. Session Data. When you use our First Read tool, we collect and store conversation logs and session notes, including scene development discussions, outline notes and revisions, script notes and feedback, brainstorming session content, and show bible development.

E. Behavioral Observations (Accretive Learning). StoryHack employs an accretive learning system that silently observes your interactions with the Service to identify and extract behavioral patterns. Over time, the system develops a profile of your creative tendencies, including resistance patterns, engagement signals, decision patterns, fixation themes, and style preferences. These behavioral observations are stored as part of your user profile and are used to personalize and improve your experience with the Service. You have the right to review, request deletion of, or opt out of this observation process (see Section 8: Your Rights).

F. Usage Data. We automatically collect certain information about your interactions with the Service, including pages visited and features used, session duration and frequency, and device type and browser information.

G. Payment Information. Payment processing is handled by a third-party payment processor (such as Stripe). StoryHack does not collect or store payment card information directly. See Section 7 for information about how payment data is handled.

2. How We Use Your Information

We use the information we collect for the following purposes:

  • To provide, maintain, and operate the Service for you
  • To personalize your experience and develop improved Voice Profiles that better reflect your creative voice
  • To communicate with you about your account, service updates, and policy changes
  • To respond to your inquiries and provide customer support
  • To comply with legal obligations and enforce our Terms of Service
  • To analyze usage patterns at the aggregate level (not at the level of your individual creative content) to improve user experience and Platform features

We do not use your creative content (Voice Profile, scripts, outlines, story materials, session logs, or any other creative work product) to train any AI model. See Section 4 for details.

3. Data Sharing and Disclosure

StoryHack does not sell, trade, or rent your personal information to third parties. However, we do share information in the following circumstances:

Service Providers (sub-processors). We share information with third-party service providers that assist us in operating our website and conducting our business, including:

  • Supabase (database hosting and cloud storage)
  • Anthropic (AI model provider for First Read processing, under commercial API terms providing for non-training of customer inputs and outputs)
  • OpenAI (vector embeddings provider, under commercial API terms providing for non-training of customer inputs and outputs)
  • Vercel (web hosting)
  • PostHog (product analytics and anonymized usage tracking; all text inputs are masked and creative content is not recorded)
  • AssemblyAI (audio transcription for uploaded room recordings, under commercial API terms)
  • Resend (transactional email delivery)
  • Google APIs (Google Docs export, used only when you initiate an export)
  • Future payment processors (such as Stripe for payment processing)

We do not provide your creative content to any third party other than the sub-processors listed above. Adding a new sub-processor with access to your creative content requires us to update this Privacy Policy and provide notice.

Legal Requirements. We may disclose your information when required by law, regulation, legal process, or governmental request, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

Business Transfers. If StoryHack is involved in a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will provide notice of any such change.

4. Your Content and AI Model Training

This section sets out our commitments regarding your creative content and AI model training. We treat these commitments as central to the trust relationship between you and StoryHack, and we make them explicit so there is no ambiguity.

A. We do not train any AI model on your creative content. We do not train, fine-tune, or otherwise improve any artificial-intelligence model on your creative content, your Voice Profile, your session logs, your behavioral observations, or any other content you upload to or generate within the Service. We do not maintain a first-party AI model that is trained on user content.

B. Our third-party AI providers are configured for non-training. The First Read tool processes your data through Anthropic's API and uses OpenAI's API for vector embeddings. Both providers are used under their commercial API terms which provide for non-training of customer inputs and outputs by default. Anthropic's commercial API terms confirm that customer inputs and outputs are not used to train Anthropic's models on paid commercial tiers. OpenAI's API data usage policy confirms the same for data submitted via the API. We monitor these third-party API terms on an ongoing basis. If either provider materially changes its non-training default, we will provide notice through this Privacy Policy and through Platform-level notification, and we will evaluate whether to migrate the affected pipeline step to a provider with comparable non-training guarantees.

C. Anthropic's privacy practices. Your conversation data is transmitted to Anthropic's servers for AI processing as described above. Beyond the non-training commitment, your data is also subject to Anthropic's broader privacy and data handling practices. We recommend reviewing Anthropic's privacy policy for additional context.

D. OpenAI's privacy practices. Your data is transmitted to OpenAI's servers for vector embedding generation. Beyond the non-training commitment, your data is also subject to OpenAI's broader privacy and data handling practices. We recommend reviewing OpenAI's privacy policy for additional context.

E. No future training without your consent. We will not use your creative content to train any AI model now or in the future without your express written consent.

5. How We Treat Your Creative Content

This section sets out additional commitments regarding how we handle your creative content beyond the AI training commitments in Section 4.

A. No human review without consent. No StoryHack employee, contractor, or agent will read, view, or otherwise access your creative content without your prior consent, except: (i) where you initiate a support request that requires us to view specific content to resolve the issue, in which case consent is implied by the support request itself; (ii) where required by law, regulation, or valid legal process, in which case we will provide notice to you to the extent legally permitted; or (iii) where automated systems require human review to investigate suspected security incidents, fraud, or abuse of the Service, in which case access is limited to the minimum necessary to investigate.

B. No marketing use without consent. We will not use your creative content, in whole or in part, in any marketing material, case study, public presentation, sales demonstration, or other public-facing communication, without your express written consent. This restriction applies to direct quotation as well as to paraphrase or summary that would identify the content as yours.

C. No public display without consent. Your creative content is displayed only to you (through your account) and to any individuals you explicitly share it with through Platform features. We do not publicly display your creative content.

D. You own your creative content. You are the sole owner of all right, title, and interest in your creative content, including your Voice Profile. We claim no ownership interest in your creative content. Our license to your content is limited to hosting, storing, transmitting, processing, and displaying it back to you for the sole purpose of providing the Service. This is described in more detail in our Terms of Service and, for beta testers, in our Beta Tester Confidentiality Agreement.

6. Data Retention

Voice Profiles and associated data (including session logs and behavioral observations) are retained while your account remains active. Upon account deletion, we will retain your Voice Profile data for 30 days to allow for recovery requests, after which it will be permanently deleted. Creative content you upload is retained as long as your account is active and can be exported or deleted at your request.

7. Data Security

StoryHack implements industry-standard security measures to protect your information, including:

  • Encryption of data in transit (TLS/SSL) and at rest (AES-256 via Supabase Pro infrastructure)
  • Access controls and role-based permissions for team members
  • Regular security audits and updates
  • Private code repositories with restricted access

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Your Rights

A. Right to Access. You have the right to request and download your Voice Profile, all associated session data, behavioral observations, and creative content.

B. Right to Deletion. You may request deletion of your Voice Profile, behavioral observations, and creative content. Once your account is deleted, we will permanently delete your data after a 30-day recovery period.

C. Right to Export. You have the right to export your Voice Profile and all associated session data and creative content in a portable format.

D. Right to Opt Out of Behavioral Observations. You may opt out of the accretive learning system (behavioral observation collection). If you opt out, we will stop collecting new behavioral observations, though previously collected observations remain in your profile unless you request their deletion. Opting out may reduce the personalization and effectiveness of the First Read tool.

E. California Consumer Privacy Act (CCPA) Rights. If you are a California resident, you have the following rights under the CCPA:

  • Right to Know: You may request what personal information StoryHack has collected about you
  • Right to Delete: You may request deletion of personal information collected from you (subject to certain exceptions)
  • Right to Opt Out of Sale: You have the right to opt out of the sale of your personal information. StoryHack does not sell personal information.
  • Right to Non-Discrimination: StoryHack will not discriminate against you for exercising your CCPA rights

To exercise any of these rights, please contact us at logan@storyhack.io with your request.

9. Children's Privacy

StoryHack is not intended for users under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected information from a child under 18, we will take steps to delete such information and terminate the child's account.

10. International Data Processing

StoryHack processes and stores data in the United States. If you access the Service from outside the United States, you consent to the transfer and processing of your information in the United States, which may have different privacy laws than your country of residence.

11. Changes to This Privacy Policy

StoryHack may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by updating the “Effective” date at the top of this policy. Your continued use of the Service after such changes constitutes your acceptance of the updated Privacy Policy. Material changes to Section 4 (Your Content and AI Model Training) or Section 5 (How We Treat Your Creative Content) will additionally be communicated through Platform-level notification.

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

StoryHack Technologies LLC
Los Angeles, California
Email: logan@storyhack.io