Privacy Policy
Last updated: March 2026
1. Who We Are
StoryBond (“we”, “our”, “us”) is an AI-powered personalised storytelling platform for families, operated from India. We can be reached at hello@storybond.in.
2. What Data We Collect
- Account data: Your email address (used for sign-in via Google OAuth or magic link).
- Child profile data: Child's first name, age 3 to 12 (preteen) for story features, gender (optional), interests, and a hero photo (optional) that you choose to upload.
- Story content: Story prompts you enter and the AI-generated stories, translations, and audio narrations produced from them.
- Payment data: Order amounts and Razorpay order IDs. We do not store card numbers, UPI handles, or bank details; all payment processing is handled by Razorpay.
- Usage data: Pages visited, features used, and AI cost logs (used to enforce fair-use limits). Collected via PostHog analytics and Sentry error monitoring.
- Device data: Browser type, operating system, and IP address, collected automatically by our hosting provider (Vercel).
3. How We Use Your Data
- To create and deliver personalised stories for your child.
- To authenticate your account securely.
- To process subscription payments and send order confirmations.
- To provide audio narration, translation, and illustrated story panels.
- To enforce fair-use AI spending limits and prevent abuse.
- To send transactional emails (sign-in links, order receipts). We do not send marketing emails without your consent.
- To improve the product and fix bugs using anonymised usage analytics.
4. Third-Party Services
We share only the minimum data necessary with each provider to deliver the service:
| Provider | Purpose | Data shared |
|---|---|---|
| Supabase | Database, authentication, file storage | Account & story data |
| OpenAI | Story generation, content moderation | Story prompts (no names sent) |
| Google (Gemini) | Story panel & hero illustration generation | Story text, hero photo (optional) |
| ElevenLabs | Audio narration (non-Indian languages) | Story text |
| Sarvam AI | Audio narration (Indian languages) | Story text |
| Razorpay | Payment processing | Order amount; no card data |
| Resend | Transactional email | Your email address |
| Vercel | Web hosting & CDN | Request logs, IP address |
| PostHog | Anonymous usage analytics | Anonymised events |
| Sentry | Error monitoring | Error traces (no story content) |
We do not sell your data. We do not share your data with advertisers.
5. Children's Privacy
StoryBond is designed for families. Child profiles are created by a parent or guardian (the account holder), not by the child directly. We do not knowingly allow children to create their own accounts or submit data independently. Child profile data (name, age, interests, photo) is used solely to personalise stories and is never shared with advertisers or used for profiling.
In compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India and applicable international standards including COPPA, we process children's data only with verifiable parental consent (the parent/guardian creating the account constitutes consent). You may request deletion of your child's data at any time — see Section 7.
6. Data Retention
- Account and story data is retained while your account is active.
- If you delete your account, all personal data and child profiles are deleted within 30 days.
- Payment records are retained for 7 years as required by Indian tax law.
- Anonymised analytics data may be retained indefinitely in aggregated form.
7. Your Rights
You have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data via your account settings.
- Delete your account and all associated data by emailing hello@storybond.in with “Delete my account” in the subject line.
- Export your stories: contact us and we will provide them in a portable format.
- Withdraw consent at any time by deleting your account.
We will respond to all data requests within 30 days.
8. Security
All data is transmitted over HTTPS. Passwords are not used; authentication is via Google OAuth or one-time magic links, eliminating the risk of password breaches. Data is stored in Supabase with row-level security policies enforcing that users can only access their own data. Hero photos are stored in Supabase Storage with access-controlled URLs.
9. Cookies
We use only functional cookies — specifically, a Supabase session cookie to keep you signed in. We do not use advertising or tracking cookies.
10. Changes to This Policy
We may update this policy as the product evolves. Material changes will be notified via email. The “Last updated” date at the top of this page reflects the most recent revision.
11. Contact
For any privacy questions or data requests, contact:
Binu Chacko, Founder — StoryBond
hello@storybond.in