Privacy Policy

Last updated: 9 February 2026

This Privacy Policy explains how My Story Studio (the "Service", "we", "us", or "our") collects, uses, and shares information when you access or use mystory.studio (the "Website").

By using the Service, you acknowledge this Privacy Policy. If you do not agree, please do not use the Service.

Information We Collect

We collect only what is needed to operate and secure the Service:

  • Story inputs (premises, styles, and lengths) that you submit.
  • Generated outputs (story text, title, image, and audio URL) produced by the Service.
  • Technical data such as IP address, device/browser information, and server logs generated by our hosting and infrastructure providers.
  • Local storage data in your browser used to enforce client-side usage limits.
  • Analytics data collected by our analytics provider to understand general usage trends.

We do not ask you to provide your name, email address, or other direct contact information to use the Service.

How We Use Information

  • Provide and operate the Service and its features.
  • Generate stories, images, and audio on your request.
  • Store and display generated stories.
  • Moderate content for safety and compliance.
  • Detect, prevent, and respond to abuse or misuse.
  • Maintain, monitor, and improve the Service.

How We Share Information

We share information only with trusted service providers necessary to deliver the Service, including:

  • xAI (Grok) for text, image, and audio generation and safety moderation.
  • Amazon S3 for storage of generated images and audio files.
  • MongoDB for storage of story data.
  • Hosting and analytics providers to run and measure the Service.

We may also disclose information if required by law, regulation, or legal process, or to protect rights, safety, and security.

Data Retention

We retain story inputs and generated outputs for as long as needed to operate the Service and for legitimate business or legal purposes. Some content may be retained in backups or logs for a limited period.

Security

We use reasonable administrative, technical, and physical safeguards to protect information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

International Transfers

Our service providers may process data in countries other than your own. Where required, we rely on appropriate safeguards for cross-border transfers.

Children's Privacy

The Service is designed for general audiences and does not intentionally collect personal information from children. If you are a parent or guardian and believe a child has provided personal information, please contact us and we will take appropriate action.

Your Choices

  • You can clear local storage in your browser to reset client-side usage limits.
  • You may request deletion of a story you created by contacting us with the story identifier.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The revised policy will be posted on this page with an updated date.

Contact Us

If you have questions or concerns about this Privacy Policy, please contact us at support@twentythree.dev.