Privacy Policy

1. Overview & Compliance Framework

Welcome to StoryK.in ("StoryK", "We", "Us", or "Our"). We are dedicated to maintaining the highest standards of privacy, data protection, and transparency for our creators and users. This Privacy Policy governs our data collection, processing, storage, sharing, and data subject rights in strict compliance with:

• The Digital Personal Data Protection Act, 2023 (DPDP Act) of India;
• The Information Technology Act, 2000 (IT Act) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011;
• The Meta Platform Terms and Developer Data Policy governing access to Facebook Graph API and Instagram Graph API;
• The Google API Services User Data Policy governing YouTube API integrations; and
• Applicable global data protection frameworks, including the General Data Protection Regulation (GDPR) for international creators.

2. Information We Collect

We collect only the minimum necessary personal, operational, and technical information required to deliver our AI video generation, automated scheduling, social publishing, and performance analytics tools:

• Account & Profile Information: Full name, email address, encrypted authentication credentials, selected interface language, and user workspace preferences.
• Billing & Subscription Details: Subscription plan tier, transaction status, billing dates, order numbers, and invoice records. Note: All online payments are handled securely by RBI-authorized, PCI-DSS compliant payment gateways (such as Razorpay). StoryK NEVER collects, processes, or stores sensitive credit/debit card numbers, CVVs, or net banking credentials on our infrastructure.
• AI Video Generation Inputs: Video prompts, topics, custom narration scripts, chosen neural voice models, language selections, subtitle formatting styles, and visual scene search queries created within your Creator Dashboard.
• Social Media Connection & Token Data: OAuth user access tokens, long-lived Page access tokens, connected account identifiers (such as Instagram Business Account ID, Facebook Page ID, YouTube Channel ID), account display names, and public profile avatars.
• Technical, Device & Analytics Data: IP address, browser type and version, device operating system, access timestamps, feature usage interactions, and system diagnostic logs to maintain platform stability and protect against malicious cyber activity.

3. Meta (Instagram & Facebook) Platform Data Handling & Privacy Disclosures

StoryK offers optional social media publishing and performance analysis tools powered by the official Meta Graph API. When you connect your Facebook Page or Instagram Business/Creator Account to StoryK, the following specific terms apply:

3.1. Instagram Content Publishing & Account Management

• Permissions Requested: instagram_basic, instagram_content_publish.
• Data Accessed: Connected Instagram Business/Creator Account ID, username, public profile photo, media container creation identifiers, publishing status, and OAuth access tokens.
• Purpose of Use: To enable you to create, schedule, format, and automatically publish short-form video Reels, video posts, custom thumbnails, captions, and hashtags directly to your authorized Instagram accounts at times you configure.
• User Control: Content is published to Instagram strictly upon your explicit instruction or according to automated schedules and niches configured by you in your Creator Dashboard. StoryK never publishes unauthorized or unsolicited posts to your account.

3.2. Instagram Insights & Performance Analytics

• Permissions Requested: instagram_manage_insights, instagram_basic.
• Data Accessed: Post-level and account-level performance metrics, including impressions, reach, engagement rate, likes, comments, shares, video view counts, and viewer interaction metrics.
• Purpose of Use: To aggregate and display performance dashboards within your private StoryK dashboard, track video reach, compute optimal posting schedules ("Best Time to Post" heatmap), and provide AI-driven content optimization suggestions.
• Privacy Guarantee: Instagram analytics data is accessible only by the account owner. StoryK does NOT aggregate, sell, or disclose your individual Instagram analytics to third parties or other users.

3.3. Facebook Page Content Publishing & Management

• Permissions Requested: pages_manage_posts, pages_show_list.
• Data Accessed: List of Facebook Pages you manage (Page ID, Page name, Page category, Page profile picture), Page access tokens, published post IDs, and post publication statuses.
• Purpose of Use: To display your authorized Facebook Pages for selection, and to schedule, format, and publish video Reels, short videos, video titles, and descriptions to your chosen Facebook Pages.

3.4. Facebook Page Insights & Engagement Analytics

• Permissions Requested: pages_read_engagement, read_insights, pages_read_user_content.
• Data Accessed: Post engagement statistics, including video views, reactions, comments, reach, impressions, and viewer engagement counts.
• Purpose of Use: To monitor publication status, verify successful delivery, display live video view counts on your schedule manager, and calculate historical engagement analytics.

3.5. Meta Token Security, Storage & Encryption

All Meta OAuth access tokens, refresh tokens, and account keys are transmitted exclusively over encrypted HTTPS/TLS 1.3 channels and are stored at rest using AES-256 encryption with isolated key management. Tokens are never exposed in client-side source code, public logs, or unauthorized endpoints.

3.6. Prohibition on Data Sale, Profiling & Advertising Exploitation

In strict compliance with Meta Developer Policies, StoryK affirms that:

• We do NOT sell, rent, lease, trade, or transfer Facebook or Instagram user data or access tokens to data brokers, ad networks, search engines, or third-party marketers.
• We do NOT use Facebook or Instagram data for surveillance, user tracking, credit assessment, or profiling purposes.
• We do NOT use Meta user content or social analytics to train public AI foundational models without explicit user consent.

4. YouTube & Other Social Platform Integrations

When you connect a YouTube Channel to StoryK via Google OAuth, we access your channel ID, channel name, and upload permissions (https://www.googleapis.com/auth/youtube.upload, https://www.googleapis.com/auth/youtube.readonly) solely to upload user-created video Shorts and retrieve video view statistics. StoryK adheres strictly to the Google API Services User Data Policy, including the Limited Use requirements.

5. AI Model Processing & Voiceover Synthesis Disclosures

StoryK leverages artificial intelligence models (such as Google Gemini, OpenRouter, and Sarvam AI) to generate scripts and synthesize regional neural voiceovers:

• Only prompt topics and script texts submitted by the user are transmitted to AI inference engines.
• Your private authentication credentials, social media access tokens, billing information, and email addresses are NEVER shared with or processed by third-party AI model providers.
• AI-generated scripts and audio files remain the intellectual creation of the user, subject to our Terms of Service.

6. Third-Party Sub-Processors & Infrastructure Providers

To provide high-reliability cloud computing, StoryK engages trusted enterprise sub-processors under strict data protection agreements:

• Amazon Web Services (AWS Asia Pacific - Mumbai): Secure cloud hosting, database storage, and AWS Lambda GPU/CPU serverless video compilation.
• Sarvam AI: Indian neural voiceover synthesis engine for high-fidelity regional Indian languages (Hindi, Tamil, Telugu, Kannada, Bengali, etc.).
• Razorpay Software Private Limited: RBI-regulated Indian payment gateway for processing INR subscriptions and UPI/card payments.
• Meta Platforms, Inc. (Graph API): Official API infrastructure for publishing Reels/videos and fetching analytics on Instagram and Facebook.
• Google LLC (YouTube Data API): Official API infrastructure for publishing YouTube Shorts and monitoring analytics.

7. Data Retention, Storage & Security Measures

• Data Encryption: All data in transit is protected via TLS 1.3 encryption. Sensitive tokens and secrets are encrypted at rest using AES-256.
• Rendered Video Retention: Rendered video output files and temporary scene clips are securely cached on cloud storage to allow downloading and social publishing. Temporary render caches are automatically cleaned based on system storage cycles.
• Social Token Retention: Social media tokens are stored only while your account connection is active. When you disconnect a social channel or delete your StoryK account, all corresponding access tokens and scheduled posts are immediately purged.

8. User Data Deletion Instructions & Revocation (Meta App Review Compliance)

StoryK provides multiple simple, instant methods for users to delete their personal data, revoke social media access, and request complete erasure:

• Method 1 (Instant Disconnection in StoryK): Navigate to your Creator Dashboard → Social Accounts Tab, and click "Disconnect" next to any connected Instagram, Facebook, or YouTube account. This immediately invalidates and deletes the stored access tokens and halts all scheduled automation.
• Method 2 (Revoke via Meta / Facebook Settings):
  1. Log in to your Facebook account and open Settings & Privacy → Settings.
  2. In the left sidebar, select Apps and Websites.
  3. Locate StoryK in the list of active apps and click Remove.
  4. Confirm the removal to instantly revoke StoryK's access to your Facebook Pages and Instagram accounts.
• Method 3 (Dedicated Data Deletion Page & Automated Request): You can visit our dedicated User Data Deletion page at https://storyk.in/data-deletion or submit a request directly to support@storyk.in. All associated user records, task histories, and social data will be permanently wiped within 48 to 72 hours.

9. User Rights Under the DPDP Act 2023 & International Laws

As a Data Principal under the DPDP Act 2023 and global privacy standards, you have the right to:

• Right of Access & Summary: Request a summary of personal data being processed by StoryK.
• Right to Correction & Erasure: Request the correction of misleading or incomplete data, or the complete erasure of your personal data.
• Right to Nominate: Nominate an individual to exercise data rights in the event of death or incapacity.
• Right of Grievance Redressal: Submit grievances directly to our Data Protection Officer for prompt resolution.

10. Statutory Grievance Redressal Officer (IT Act 2000 & DPDP Act 2023)

In accordance with the Information Technology Act, 2000, the IT Rules 2011, and the Digital Personal Data Protection Act, 2023, the contact details of our designated Grievance Officer are:

11. Non-Affiliation & Trademark Disclaimers

StoryK is an independent SaaS productivity application developed to help creators produce and distribute multimedia content. StoryK is not affiliated with, endorsed by, sponsored by, or partner of Meta Platforms, Inc., Instagram, Facebook, YouTube, Google LLC, TikTok, or ByteDance. All trademarks, service marks, logos, and brand names are the property of their respective owners.

12. Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect enhancements in our features, changes in Meta or Google API policies, or legal amendments. Updates will be posted on this page with a revised "Last updated" date. Continued use of StoryK after modifications constitutes your acceptance of the updated policy.