Privacy Policy

Last updated: June 24, 2026 · StoryStrip is operated by Venture XYZ Inc., Toronto, Ontario, Canada.

1. Who We Are

StoryStrip (storystrip.io) is a photo book service operated from Toronto, Ontario, Canada. We are subject to the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

2. What We Collect

Account information: email address, name (via Clerk authentication).
Photos: images you upload to create your book. Stored securely in Supabase Storage.
Order information: tier selected, occasion, story seed, shipping address, payment details (processed by Stripe — we never store card numbers).
Usage data: pages visited, actions taken (standard web analytics).

3. How We Use It

To produce and ship your photo book.
To generate narrative prose using our AI engine (OpenAI GPT-4o).
To send transactional emails (order confirmation, narrative ready, shipping).
To improve our product and service quality.

We do not sell your personal information. We do not use your photos to train AI models.

4. Who We Share It With

Clerk — authentication (clerk.com)
Stripe — payment processing (stripe.com)
Supabase — database and file storage (supabase.com)
OpenAI — narrative generation (openai.com) — photos are not sent to OpenAI; only metadata is used
Gelato — print and fulfillment (gelato.com)
Resend — transactional email (resend.com)
Vercel — hosting (vercel.com)

All processors are contractually bound to protect your data.

5. Your Photos

Your photos are stored only for the purpose of producing your book. We retain them for 90 days after your order ships, then delete them permanently. You may request earlier deletion by emailing us.

6. Your Rights (PIPEDA)

You have the right to: access the personal information we hold about you; correct inaccurate information; withdraw consent (subject to legal or contractual restrictions); request deletion of your data. To exercise any of these rights, contact us at the email below.

7. Data Retention

Account data is retained while your account is active. Order records are retained for 7 years for tax and legal compliance. Photos are deleted 90 days post-shipment.

8. Security

We use industry-standard encryption in transit (TLS) and at rest. Access to personal data is restricted to personnel who need it to operate the service.

9. Cookies

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies.

10. Contact

Questions or requests: hello@storystrip.io
StoryStrip · Toronto, Ontario, Canada