Privacy Policy
Last Updated: May 13, 2026
1. Introduction
This Privacy Policy explains how LongStories.ai ("LongStories," "we," "us," or "our") collects, uses, shares, and protects information when you use https://longstories.ai, our AI video creation tools, account features, payment flows, and related services.
For users in the European Economic Area, United Kingdom, and Switzerland, LongStories is the controller of personal data described in this policy unless a feature states otherwise.
2. Data We Collect
- Account data, such as your name, email address, authentication provider, account settings, subscription status, and support requests.
- Creator and project data, such as prompts, scripts, characters, images, audio, videos, generated outputs, project settings, and other content you upload or create.
- Payment and billing data processed by Stripe, such as customer identifiers, checkout status, subscription details, invoices, payment method metadata, and tax or billing information where applicable.
- YouTube data, such as channel information, authentication tokens, upload status, scheduled post metadata, and other information needed when you connect a YouTube account.
- Technical data, such as IP address, device and browser type, pages viewed, referring URLs, timestamps, session identifiers, error logs, and security or fraud-prevention signals.
- Cookie and similar technology data, including consent preferences, authentication cookies, analytics identifiers, advertising identifiers, affiliate referral identifiers, and marketing attribution parameters where permitted.
3. How We Use Data
- To create, edit, store, render, and deliver AI-generated videos and related assets.
- To operate accounts, authentication, subscriptions, credits, checkout, invoices, refunds, and customer support.
- To provide integrations you request, including YouTube channel uploads and related Google API features.
- To maintain security, prevent abuse, detect fraud, debug errors, and enforce our Terms of Service.
- To understand product performance and improve the Service, when analytics consent is granted where required.
- To measure ads, attribute campaigns, personalize ads, and operate affiliate/referral programs, when marketing consent is granted where required.
- To comply with legal obligations and maintain records of legal acceptance, consent choices, payments, and account activity.
4. Legal Bases for EEA, UK, and Swiss Users
Where GDPR-style laws apply, we rely on the following legal bases:
- Contract: to provide accounts, subscriptions, credits, generation features, payments, support, and integrations you request.
- Legitimate interests: to secure the Service, prevent abuse and fraud, debug issues, improve reliability, respond to support requests, and understand business performance in ways that do not override your rights.
- Consent: for optional analytics cookies, advertising cookies, ads personalization, certain marketing communications, and connected third-party integrations where consent is required.
- Legal obligation: to keep records, respond to lawful requests, handle tax/accounting obligations, and comply with applicable law.
5. AI Processing
To provide AI generation features, we may send prompts, scripts, uploaded media, selected project settings, and generated outputs to AI model, media generation, rendering, storage, and infrastructure providers. These providers process the data to deliver the requested feature, operate their services, apply safety systems, troubleshoot issues, and comply with their legal obligations. Do not submit content that you do not have the right to use.
6. YouTube API Services
Our Service uses YouTube API Services. By using our YouTube integration features, you are also agreeing to be bound by YouTube's Terms of Service.
For more information about how Google handles your data, please review the Google Privacy Policy.
You can revoke LongStories' access to your YouTube account at any time through your Google Security Settings.
We explicitly affirm that data obtained through Google APIs is not used to develop, improve, or train generalized AI or machine learning models. Google API data is used only to provide the requested integration features and is handled in accordance with the Google API Services User Data Policy, including the Limited Use requirements where applicable.
7. Cookies, Consent, and Similar Technologies
We use cookies, local storage, pixels, tags, and similar technologies. Some are necessary for the Service to work; others are optional and are controlled through our cookie consent banner.
- Necessary technologies: authentication, security, fraud prevention, legal consent records, account sessions, checkout, and referral crediting needed to operate the Service.
- Analytics technologies: Google Analytics, PostHog, DataFast, and Ahrefs Web Analytics help us understand usage and improve the Service. We load these optional tools only after analytics consent where required.
- Advertising and marketing technologies: Google Ads, Google Tag Manager, Meta Pixel, Rewardful, campaign parameters, and click identifiers may be used for ad measurement, ads personalization, affiliate attribution, and campaign reporting. We load optional advertising and marketing scripts only after marketing consent where required.
We use Google Consent Mode to communicate your analytics and advertising choices to Google tags. By default, analytics and advertising storage are denied until you make a choice, except where consent is not legally required. You can change your choices at any time by selecting the cookie settings control on the site. We keep a pseudonymous record of your cookie choices to help demonstrate compliance. Withdrawing consent does not affect processing that happened before withdrawal.
We do not sell personal information in the ordinary sense of exchanging it for money. If a US privacy law treats advertising cookies, pixels, or similar technologies as a "sale," "sharing," or targeted advertising, you can opt out by rejecting marketing cookies or changing your cookie settings.
Learn more about how Google uses information from sites and apps that use Google services at Google's partner sites notice and about Google's business data practices at Google Business Safety.
8. Data Sharing and Service Providers
We do not sell or rent your personal data. We share data with service providers only as needed to operate, secure, improve, and market the Service, process payments, comply with law, or provide integrations you request.
- Infrastructure, database, storage, authentication, and hosting providers, including Supabase, AWS, Cloudflare, and related infrastructure providers.
- Payment and billing providers, including Stripe.
- AI, media generation, rendering, transcription, and model providers used to generate or process requested content.
- Email, support, notification, monitoring, logging, and error-reporting providers, including Resend, Telegram, and Sentry.
- Analytics providers, including Google Analytics, PostHog, DataFast, and Ahrefs, when analytics consent is granted where required.
- Advertising, measurement, and affiliate providers, including Google Ads, Google Tag Manager, Meta, and Rewardful, when marketing consent is granted where required.
- Google and YouTube API services when you connect or use Google-powered integrations.
9. Data Retention
- Account, project, and generated content data is retained while your account is active or as needed to provide the Service, unless you delete it or request deletion where available.
- Payment, invoice, fraud-prevention, and tax records may be retained as required by law and business recordkeeping obligations.
- YouTube channel data is automatically refreshed periodically, and you can revoke access through your Google account settings.
- Cookie consent preferences are generally retained for up to 180 days, consent records are retained as needed to demonstrate compliance, and marketing attribution cookies are generally retained for up to 90 days unless cleared sooner.
- Security logs, diagnostics, and backups may be retained for a limited period needed to operate, secure, debug, and recover the Service.
10. Your Choices and Rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or object to certain processing of your personal data, and to request a portable copy of certain data. You may also withdraw consent for optional analytics and marketing cookies at any time through the cookie settings control on the site.
You can manage account information in the Service, unsubscribe from marketing emails using links in those emails, revoke YouTube access through Google Security Settings, and contact us through the Help Center for privacy requests.
If you are in the EEA, UK, or Switzerland, you may also have the right to lodge a complaint with your local data protection authority.
11. International Transfers
We and our service providers may process and store information in the United States and other countries. Where required, we rely on appropriate transfer mechanisms such as standard contractual clauses, data processing agreements, or other lawful safeguards.
12. Children's Privacy
The Service is intended for parents, guardians, educators, creators, and other adults or authorized users, not for direct use by children under 13. We do not knowingly collect personal data from children under 13 or the minimum age required by local law directly from a child. Parents, guardians, or authorized users may submit content that includes a child only when they have the rights and permissions needed to do so. If you believe we have received data from a child without appropriate permission, please contact us immediately.
13. Security
We use reasonable technical and organizational measures designed to protect your data. However, no method of transmission or storage over the internet is completely secure, and we cannot guarantee absolute security.
14. Changes to This Policy
We may revise this Privacy Policy from time to time. If we make material changes, we will update the date above and provide additional notice where required.
15. Contact Information
If you have questions or concerns about our Privacy Policy, please contact us:
Email: uri@longstories.ai
Help Center: LongStories Help Center