Privacy Policy

Purple Hardstone LLC ("StrokeTale", "we") runs StrokeTale. This policy explains what we collect, why, who we share it with, how long we keep it, and your choices. Contact: support@stroketale.com.

1. What we collect

Your account

• Your email address, and your name if you give one.
• Your password, stored only as a secure hash.
• Your plan, credit balance and credit history.

Your projects and files

• What you type or paste: topics, documents and text, script edits, and requests in the editor chat.
• What we make for you: scripts, scene plans, pictures, narration audio, presenter clips and exported videos.
• Music you upload, and your confirmation that you have the rights to it.

Usage and security data

• What you generated and how many credits it used.
• When you hit a plan limit.
• Your sign-in sessions, including the IP address.
• Security events such as failed sign-ins and account deletion.
• If you use our free tools without an account, we use your IP address to limit how often they can be used.
• When you create an account, we note how you found us: the campaign tag (utm source, medium, campaign), the referring website's domain, and the first page you landed on, taken from that day's site statistics (section 3). We use it to see which channels bring sign-ups. It is deleted with your account.

Payments

• Stripe processes card payments on its own pages. We send Stripe your email and an internal purchase reference.
• Stripe tells us whether the payment succeeded, the amount and the currency.
• We never see or store your card number.

We do not collect your face, voice recordings, precise location, contacts or device advertising ID (site statistics keep at most an approximate country, section 3). StrokeTale has no feature that captures them.

2. Why we use it

• To provide the Service: making videos, saving projects, billing credits. Legal basis (EU/UK): contract.
• To keep the Service safe: rate limits, fraud and abuse checks, script safety checks, and investigating reports. Legal basis: legitimate interests and legal obligations.
• To support you and to tell you about important changes, such as changes to these terms or your account. Legal basis: contract and legitimate interests.
• To keep accounting and tax records. Legal basis: legal obligation.

We do not:

• sell your personal information;
• share it for targeted advertising;
• use your content to train AI models.

3. Cookies and browser storage

• We do not use cookies, third-party trackers or third-party analytics on StrokeTale.
• Your sign-in token is kept in your browser tab's session storage and is cleared when you close the tab.
• We keep a few settings in your browser's local storage, for example dismissed tips and whether you've given feedback.
• Stripe's checkout pages may set their own cookies under Stripe's privacy policy.

Site statistics. We count visits to our website and app ourselves, on our own servers, to learn which pages and channels work. This is first-party and cookieless: nothing is stored in your browser for it, and no third party receives it. Each page view sends the page address (without its query string, except campaign tags), the referring site's domain, a rough screen-width and page-load-time range, your browser's language, and whether it is the website or the app. On our side we derive the browser, operating system and device type families and, where our hosting provider supplies it, an approximate country. We do not store your IP address or your full browser identification string. To tell visitors apart within one day, we keep a one-way hash of your IP address and browser string mixed with a random value that changes every day and is then deleted, so we cannot recognise you on another day or link the statistics to you. If your browser sends Do Not Track or Global Privacy Control, nothing is sent or counted. Detailed page views are kept for 90 days; after that only daily totals remain. Legal basis (EU/UK): legitimate interests (understanding and improving our website). [ATTORNEY: confirm the consent exemption and legal basis, see before_publishing.]

4. Who we share it with

We share data only with providers that help us run StrokeTale. They act on our instructions under data protection terms.

We may also disclose data:

• if the law requires it;
• to protect people's safety or our rights;
• to a buyer of our business, under this policy.

Some of these providers are in the United States. If you are in the EU or UK, we transfer data under [ATTORNEY: Standard Contractual Clauses / UK addendum / EU-US Data Privacy Framework].

5. Staff access

A small number of our staff can view account and project data to give support, investigate abuse, or fix problems. Their access is logged.

6. How long we keep it

7. Deleting your account

You can delete your account in Settings → Delete account. You confirm with your password. We then:

• erase your projects (trash included), jobs, uploaded music and your files, except files that are also part of another user's projects or that you made public;
• sign you out on every device;
• replace your email, name and password, so the account can't be used and your email is free again.

We keep your credit and purchase history, linked only to an anonymous id, for accounting. Copies in backups expire as shown in section 6.

8. Your rights

• Download your data: in Settings → Download my data you get your account details, projects, credit and purchase history, and a list of your files.
• Your other rights. Depending on where you live (for example under the GDPR, the UK GDPR or US state laws such as California's), you may also ask us to:
  • access, correct or delete your data;
  • restrict or object to how we use it;
  • transfer it.
• How to ask. Email support@stroketale.com. We answer within 30 days (45 days where California law allows), and we may need to confirm it's you.
• No discrimination. We won't treat you differently for using these rights.
• Complaints. If you are in the EU or UK, you can complain to your data protection authority.

9. Children

• StrokeTale is not directed to children under 13, and accounts are for people 18 and older.
• We do not knowingly collect children's personal information. If you believe a child has given us data, email support@stroketale.com and we will delete it.
• Teachers: don't upload students' personal information unless your school has authorised it.

10. Security

• Data travels encrypted (HTTPS).
• Passwords are hashed.
• Payment data stays with Stripe.
• Our API keys never reach your device.

No system is perfectly secure. If a breach affects you, we will tell you as the law requires.

11. Changes

We will post changes here and update the date at the top. For important changes, we will also email you or tell you in the app before they apply.

12. Contact

Purple Hardstone LLC, [postal address]

• Privacy: support@stroketale.com
• [EU/UK representative, if required]