Privacy Policy
What we collect, why, how long we keep it, and your choices.
Effective Oct 12, 2026 · version 2026-10-12
1. What we collect
Account data: email, display name, language and preferences. Content: scripts, uploaded reference images, generated images, comments. Billing: plan, balance history and payment status from OxaPay (we never receive wallet private keys). Technical: sign-in events and keyed hashes of IP addresses used to prevent abuse.
2. How we use it
To provide the service (planning shots and generating images), keep your account secure, process payments, send notifications you have enabled, and comply with the law. We do not sell your data and do not use your private content to train our own models.
3. Service providers
We use providers to host data (Supabase), run AI models through the Lovable AI Gateway, and process crypto payments (OxaPay). They process data only on our instructions. AI requests contain the text and images needed for each job.
4. How long we keep it
Projects in Trash are deleted permanently after 30 days. When you delete your account, everything is removed after a short grace period. Technical logs are kept up to 90 days. Payment records are kept as required by law.
5. Your rights
You can download a copy of your data and delete your account from Settings at any time. You can also ask us to correct or restrict processing of your data.
6. Security
Your files are stored privately and shown only through short-lived links. Access to your projects is limited to you and people you explicitly share with.
7. Contact
Privacy questions: support@storycanvas.pro.